CVE-2018-17104

Published September 16th, 2018

View on NVD ↗

CVSS v3

N/A

CVSS v2

6.8

MEDIUM

Affected

PROJECT

Description

An issue was discovered in Microweber 1.0.7. There is a CSRF attack (against the admin user) that can add an administrative account via api/save_user.

microweber/microweber

Drag and Drop Website Builder and CMS with E-commerce

GitHub

3.42K