high8.8
CVE-2018-7733
An issue was discovered in YxtCMF 3.1.
Impact
An issue was discovered in YxtCMF 3.1. RbacController.class.php has CSRF, as demonstrated by modifying an administrator account via index.php/admin/user/add_post.html.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Yxtcmf | Yxtcmf | through 3.1 |