HIGH8.8
GHSA-62g2-8p9f-ghjp
QuickAppsCMS Cross-Site Request Forgery (CSRF)
Details
CSRF in `/admin/user/manage/add` in QuickAppsCMS 2.0.0-beta2 allows an unauthorized remote attacker to create an account with admin privileges.
Are you affected?
Enter the version of the package you're using.
Affected packages
Packagist/quickapps/cms
No fixed version published yet for quickapps/cms (composer). Pin to a known-safe version or switch to an alternative.