CVE-2018-15851

Flexo CMS v0.1.6 is affected by a CSRF vulnerability that can add an administrator via the /admin/user/add page. The issue is documented across multiple sources (CNVD, NVD, OSV, CVE records) and is consistently described as a CSRF leading to unauthorized admin account creation. The core impact is...