Description
JForum v2.8.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via http://target_host:port/jforum-2.8.0/jforum.page, which allows attackers to arbitrarily add admin accounts.
Unscored
CVE-2022-26173
EUVD-2022-30739GHSA-cvq7-wjgx-9gr8
JForum v2.8.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via http://target_host:port/jforum-2.8.0/jforum.page, which all…
Published Jun 16, 2022 · Updated Jul 9, 2026 · Assigned by mitre