high8.8Public exploit code
CVE-2018-19138
WSTMart 2.0.7 has CSRF via the index.php/admin/staffs/add.html URI.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- WSTMart 2.0.8 - Cross-Site Request Forgery (Add Admin)2018-12-24 · webapps · php
Impact
WSTMart 2.0.7 has CSRF via the index.php/admin/staffs/add.html URI.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Wstmart | Wstmart | Version 2.0.7 |