Description
FrontAccounting 2.4.3 suffers from a CSRF flaw, which leads to adding a user account via admin/users.php (aka the "add user" feature of the User Permissions page).
Remediation
References
Related Vulnerabilities
Apache HTTP Server Use After Free Vulnerability (CVE-2026-48913)
WordPress Plugin post-views Cross-Site Scripting (2.6.1.1)
WordPress Plugin Mz-jajak 'id' Parameter SQL Injection (2.1)
Craft CMS Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2026-28696)
WordPress Plugin Google SEO Pressor for Rich snippets Cross-Site Scripting (1.2.6)