CVE-2022-41475

Name of the Vulnerable Software and Affected Versions RPCMS version 3.0.2

Description The issue allows attackers to arbitrarily add an administrator account due to a Cross-Site Request Forgery (CSRF). This can be exploited by attackers to gain unauthorized access to the system.

Recommendations For RPCMS version 3.0.2, consider disabling the functionality that allows adding administrator accounts until a patch is available. Restrict access to sensitive areas of the application to minimize the risk of exploitation.