BEESCMS 4.0 has a CSRF vulnerability to add an administrator account via the admin/admin_admin.php?nav=list_admin_user&admin_p_nav=user URI.

Published Apr 21, 2018 · Updated Aug 5, 2024 · Assigned by mitre