Cross Site Request Forgery (CSRF) in LaikeTui v3 allows remote attackers to execute arbitrary code via the component ‘/index.php?module=member&action=add’.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-19159
Reference (s):
- https://github.com/TL-swallow/swallow/blob/master/laikecsrf