← All advisories

High severity8.8NVD Advisory· Published Mar 15, 2018· Updated Jun 17, 2026

CVE-2018-8717

CVE-2018-8717

Description

joyplus-cms 1.6.0 has CSRF, as demonstrated by adding an administrator account via a manager/admin_ajax.php?action=save&tab={pre}manager request.

Affected products

2

Joyplus CMS Project/Joyplus CMS
cpe:2.3:a:joyplus-cms_project:joyplus-cms:1.6.0:*:*:*:*:*:*:*
Joyplus/Joyplus CMSllm-fuzzy
Range: =1.6.0

Patches

Vulnerability mechanics

References

1

github.com/joyplus/joyplus-cms/issues/419nvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.