An issue was discovered in XYHCMS 3.5. It has CSRF via an index.php?g=Manage=Rbac=addUser request, resulting in addition of an account with the administrator role...
8.8CVSS7AI score0.00483EPSS
SaveExploits0References1
RedhatCVE•added 2025/05/22 7:42 a.m.•8 views
CVE-2018-14583
xyhai.php?s=/Auth/addUser in XYHCMS 3.5 allows CSRF to add a background administrator account...
