CVE-2018-16387

Elefant CMS prior to version 2.0.5 contains a CSRF vulnerability that can add a user account via the /user/add endpoint. The issue is documented across multiple disclosures (including CVE-2018-16387 and related advisories) and is confirmed by the NVD entry for CVE-2018-16387. The available descri...

CVE-2018-16387

An issue was discovered in Elefant CMS before 2.0.5. There is a CSRF vulnerability that can add an account via user/add...