CVE-2018-18436: Jtbc PHP

High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days.

JTBC(PHP) 3.0 allows CSRF for creating an account via the console/account/manage.php?type=action&action=add URI.

Affected products

• Jtbc Jtbc PHP: version 3.0.0.0 only

Published 2018-10-17. Last modified 2026-06-17.