CVE-2019-18884

Name of the Vulnerable Software and Affected Versions RISE Ultimate Project Manager version 2.3

Description The issue allows for CSRF when adding authorized users through the 'index.php/team members/add team member' endpoint.

Recommendations For version 2.3, consider implementing proper CSRF protection mechanisms to prevent unauthorized actions. As a temporary workaround, restrict access to the 'index.php/team members/add team member' endpoint to minimize the risk of exploitation.