medium5.1
CVE-2025-25772
A Cross-Site Request Forgery (CSRF) in the component /back/UserController.java of Jspxcms v9.0 to v9.5 allows attackers to arbitrarily add Administrator accoun…
Impact
A Cross-Site Request Forgery (CSRF) in the component /back/UserController.java of Jspxcms v9.0 to v9.5 allows attackers to arbitrarily add Administrator accounts via a crafted request.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ujcms | Jspxcms | from 9.0.0 through 9.5.0 |