CVE-2018-18935

Name of the Vulnerable Software and Affected Versions PopojiCMS version 2.0.1

Description The issue concerns a CSRF problem. It can be exploited via the "po-admin/route.php?mod=component&act=addnew" URI, allowing actions such as adding a level=1 account.

Recommendations For PopojiCMS version 2.0.1, as a temporary workaround, consider restricting access to the "po-admin/route.php?mod=component&act=addnew" URI to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.