CVE-2018-19561: Sikcms

High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days.

sikcms 1.1 has CSRF via admin.php?m=Admin&c=Users&a=userAdd to add an administrator account.

Affected products

• Sikcms Sikcms: version 1.1 only

Published 2018-11-26. Last modified 2026-06-17.