| Package | Affected versions | Patched versions |
|---|---|---|
| xyhcms | = 3.5 |
xyhai.php?s=/Auth/addUser in XYHCMS 3.5 allows CSRF to add a background administrator account.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free