An issue was discovered in /admin/?/user/add in Frog CMS 0.9.5. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
CSRF
Frog Cms
Frog Cms Project
NVD
Exploit-DB
CVSS 3.0
8.8
EPSS
2.4%
Z-BlogPHP 1.5.1 Zero has CSRF in plugin_edit.php, resulting in the ability to execute arbitrary PHP code. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
PHP
CSRF
Z Blogphp
Zblogcn
NVD
CVSS 3.0
8.8
EPSS
0.5%