CVE-2019-13370: Ignitedcms

High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days.

index.php/admin/permissions in Ignited CMS through 2017-02-19 allows CSRF to add an administrator.

Affected products

• Ignitedcms Ignitedcms: up to and including 2017-02-19

Published 2019-07-06. Last modified 2026-06-17.