PT-2020-17312

Name of the Vulnerable Software and Affected Versions CXUUCMS V3 version 3.1 Description The issue allows an attacker to add an administrator account via a CSRF vulnerability. This can be exploited through the "admin.php?c=adminuser&a=add" endpoint. Recommendations For CXUUCMS V3 version 3.1, as ...