← All advisories

High severity8.8NVD Advisory· Published Aug 1, 2019· Updated Jun 17, 2026

CVE-2013-7473

CVE-2013-7473

Description

Windu CMS 2.2 allows CSRF via admin/users/?mn=admin.message.error to add an admin account.

Affected products

2

Windu CMS/Windu CMSdescription
Windu CMS/Windu CMSllm-fuzzy
Range: = 2.2

Patches

Vulnerability mechanics

References

1

zeroscience.mk/blog/07/2013/windu-cms-2-2-multiple-stored-xss-and-csrf-vulnerabilities/nvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.