EUVD-2018-11234

Malware in sbrugna...

Cross site request forgery (csrf)

JEECMS 9.3 has CSRF via the api/admin/role/save URI to add a user...

PT-2018-14990

Name of the Vulnerable Software and Affected Versions JEECMS version 9.3 Description The issue allows for CSRF via the "api/admin/role/save" API endpoint to add a user. Recommendations For JEECMS version 9.3, consider implementing proper CSRF protection mechanisms to prevent unauthorized actions...

CVE-2018-19545: Cross-Site Request Forgery (CSRF)

JEECMS 9.3 has CSRF via the api/admin/role/save URI to add a user...