PT-2018-12855

Name of the Vulnerable Software and Affected Versions QCMS version 3.0.1 Description An issue exists where CSRF is possible via the "backend/user/admin/add.html" API endpoint. Recommendations For QCMS version 3.0.1, consider implementing proper CSRF protection mechanisms to prevent exploitation. ...

CVE-2018-14978: Cross-Site Request Forgery (CSRF)

An issue was discovered in QCMS 3.0.1. CSRF exists via the backend/user/admin/add.html URI...