High severity8.8NVD Advisory· Published Sep 2, 2018· Updated Jun 17, 2026

CVE-2018-16338

Description

An issue was discovered in AuraCMS 2.3. There is a CSRF vulnerability that can change the administrator's password via admin.php?mod=users and subsequently add a page or menu, or submit a topic.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Auracms/Auracmsinferred
Range: = 2.3

Patches

Vulnerability mechanics

References

github.com/auracms/AuraCMS/issues/3nvdExploitIssue TrackingThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000