← All advisories

High severity8.8NVD Advisory· Published Jul 24, 2018· Updated Jun 17, 2026

CVE-2018-14583

CVE-2018-14583

Description

xyhai.php?s=/Auth/addUser in XYHCMS 3.5 allows CSRF to add a background administrator account.

Affected products

2

Xyh/Xyhcmsinferred
Range: = 3.5
MaoGod/XYHCMSllm-create
Range: =3.5

Patches

Vulnerability mechanics

References

1

github.com/maoGod/xyhcms/issues/1nvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.