Description
Cross Site Request Forgery (CSRF) in Rukovoditel v2.8.3 allows attackers to create an admin user with an arbitrary credentials.
Remediation
References
Related Vulnerabilities
WordPress Plugin Photoswipe Masonry Gallery Cross-Site Scripting (1.2.14)
WordPress Plugin WP Reset-Most Advanced WordPress Reset Tool Cross-Site Scripting (1.86)
Jboss EAP Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2026-3260)
WordPress Plugin WP DSGVO Tools (GDPR) Security Bypass (3.1.23)
phpMyAdmin Improper Input Validation Vulnerability (CVE-2011-1941)