Description
A Cross-Site Request Forgery (CSRF) in the component /back/UserController.java of Jspxcms v9.0 to v9.5 allows attackers to arbitrarily add Administrator accounts via a crafted request.
Medium · 5.1
CVE-2025-25772
EUVD-2025-4452GHSA-r4wq-76x5-pwj9
A Cross-Site Request Forgery (CSRF) in the component /back/UserController.java of Jspxcms v9.0 to v9.5 allows attackers to arbitrarily add …
Published Feb 21, 2025 · Updated Feb 21, 2025 · Assigned by mitre