CVE-2018-20188

Name of the Vulnerable Software and Affected Versions FUEL CMS version 1.4.3

Description The issue allows for CSRF via the "users/create/" endpoint to add an administrator account.

Recommendations For FUEL CMS version 1.4.3, consider implementing proper CSRF protection mechanisms to prevent unauthorized access to the "users/create/" endpoint. As a temporary workaround, restrict access to the "users/create/" endpoint to minimize the risk of exploitation.