VYPR
← All advisories
High severity8.8NVD Advisory· Published Mar 6, 2018· Updated Jun 17, 2026

CVE-2018-7733

CVE-2018-7733

Description

An issue was discovered in YxtCMF 3.1. RbacController.class.php has CSRF, as demonstrated by modifying an administrator account via index.php/admin/user/add_post.html.

Affected products

2
  • YxtCMF/YxtCMF2 versions
    cpe:2.3:a:yxtcmf:yxtcmf:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:yxtcmf:yxtcmf:*:*:*:*:*:*:*:*range: <=3.1
    • (no CPE)range: =3.1

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.