CVE-2018-10295: Chemcms Project Chemcms

High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days.

ChemCMS v1.0.6 has CSRF by using public/admin/user/addpost.html to add an administrator account.

Affected products

• Chemcms Project Chemcms: version 1.0.6 only

Published 2018-04-22. Last modified 2026-06-17.