baijiacms V3 has CSRF via index.php?mod=site&op=edituser&name=manager&do=user to add an administrator account.

Published Apr 20, 2018 · Updated Aug 5, 2024 · Assigned by mitre