Description
An issue was discovered in YxtCMF 3.1. RbacController.class.php has CSRF, as demonstrated by modifying an administrator account via index.php/admin/user/add_post.html.
Unscored
CVE-2018-7733
EUVD-2018-19448GHSA-4wwx-hr93-hq4g
An issue was discovered in YxtCMF 3.1. RbacController.class.php has CSRF, as demonstrated by modifying an administrator account via index.p…
Published Mar 6, 2018 · Updated Sep 17, 2024 · Assigned by mitre