TI-2018-15622 CVE-2018-25397 · GHSA-gpcw-vph7-r5r3PHP-SHOP 1.0 Cross-Site Request Forgery via users.phpPriority HIGH 70PHP-SHOP 1.0 contains a cross-site request forgery vulnerability that allows unauthenticated attackers to add administrative users by crafting malicious HTML forms.CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00162 · Published 2026-05-29 · No fix listed CWE-352