CVE-2018-7733

CVE: CVE-2018-7733
Published: 2018-03-06T18:29Z
Description Language: en
Description: An issue was discovered in YxtCMF 3.1. RbacController.class.php has CSRF, as demonstrated by modifying an administrator account via index.php/admin/user/add_post.html.
References:
https://github.com/SQYY/CVE/blob/master/YxtCMF_C