PT-2022-9918 · Jizhicms · Jizhicms

Name of the Vulnerable Software and Affected Versions: JIZHI CMS version 1.9.4 Description: A CSRF issue allows adding an admin account via the index or the "/admin.php/Admin/adminadd.html" API endpoint. Recommendations: For JIZHI CMS version 1.9.4, update to a newer version that contains a fix f...