CVE-2018-14582

index.php?r=admini/admin/create in BageCMS V3.1.3 allows CSRF to add a background administrator account.

Date published : 2018-07-24

https://github.com/bagesoft/bagecms/issues/2