CVE-2019-11374: 74cms

High severity, CVSS 8.8. EPSS: 9.9% chance of exploitation in the next 30 days.

74CMS v5.0.1 has a CSRF vulnerability to add a new admin user via the index.php?m=Admin&c=admin&a=add URI.

Affected products

• 74cms 74cms: version 5.0.1 only

Published 2019-04-20. Last modified 2026-06-17.