Skip to content
OpenAdvisories

Vendor

Qool

2 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • Medium 5.3

    Qool CMS 2.0 RC2 Cross-Site Request Forgery via adduser

    Qool CMS 2.0 RC2 contains a cross-site request forgery vulnerability that allows attackers to perform administrative actions by tricking logged-in users into visiting malicious web pages. Attackers can forge POST requests to the /admin/adduser endpoint with p…