CVE-2018-13010 WSTMall v1.9.1_170316 has CSRF via the index.php?m=Admin&c=Users&a=edit URI to add a user account.
HighCVSS 8.8
EPSS 0.52%
- Published
- Updated
- Exploit status
- No public exploit known
Description
WSTMall v1.9.1_170316 has CSRF via the index.php?m=Admin&c=Users&a=edit URI to add a user account.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| wstmall | = 1.9.1_170316 | No fix listed |
References
- github.com exploit technical-description