CVE-2018-18922: Abisoftgt Ticketly

Critical severity, CVSS 9.8. EPSS: 2.4% chance of exploitation in the next 30 days.

add_user in AbiSoft Ticketly 1.0 allows remote attackers to create administrator accounts via an action/add_user.php POST request.

Affected products

• Abisoftgt Ticketly: version 1.0 only

Published 2018-12-13. Last modified 2026-06-17.