CVE-2019-17369: Otcms

Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days.

OTCMS v3.85 has CSRF in the admin/member_deal.php Admin Panel page, leading to creation of a new management group account, as demonstrated by superadmin.

Affected products

• Otcms Otcms: version 3.85 only

Published 2019-10-09. Last modified 2026-06-17.