{"id":"CVE-2018-14331","details":"An issue was discovered in XiaoCms X1 v20140305. There is a CSRF vulnerability to change the administrator account password via admin/index.php?c=index&a=my.","modified":"2026-07-08T16:08:52.188520Z","published":"2018-07-17T02:29:00.283Z","references":[{"type":"EVIDENCE","url":"https://github.com/rebill/xiaocms-x1/issues/1"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/rebill/xiaocms-x1","events":[{"introduced":"6249179456ae12a23887df0ae2d4507539e9cefb"},{"last_affected":"6249179456ae12a23887df0ae2d4507539e9cefb"}],"database_specific":{"cpe":"cpe:2.3:a:xiaocms:xiaocms_x1:20140305:*:*:*:*:*:*:*","extracted_events":[{"introduced":"20140305"},{"last_affected":"20140305"}],"source":"CPE_STRING"}}],"versions":["20140305","v20140305"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-14331.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"}]}