CVE-2018-19546: Jtbc PHP

High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days.

JTBC(PHP) 3.0.1.7 has CSRF via the console/xml/manage.php?type=action&action=edit URI, as demonstrated by an XSS payload in the content parameter.

Affected products

• Jtbc Jtbc PHP: version 3.0.1.7 only

Published 2018-11-26. Last modified 2026-06-17.