CVE-2020-35347

Name of the Vulnerable Software and Affected Versions CXUUCMS V3 version 3.1

Description The issue allows an attacker to add an administrator account via a CSRF vulnerability. This can be exploited through the "admin.php?c=adminuser&a=add" endpoint.

Recommendations For CXUUCMS V3 version 3.1, as a temporary workaround, consider restricting access to the "admin.php?c=adminuser&a=add" endpoint until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.