PT-2025-46685

Name of the Vulnerable Software and Affected Versions xxl-api version 1.3.0 Description A Cross-Site Request Forgery CSRF exists in xxl-api version 1.3.0. This allows attackers to add users to the management module by sending a specially crafted GET request. The attack leverages a lack of proper...