CVE-2013-2754

CVE-2013-2754 describes a Cross-Site Request Forgery (CSRF) vulnerability in Umisoft UMI.CMS versions prior to 2.9 build 21905. This flaw allows remote attackers to hijack an authenticated administrator's session to create new administrator accounts. With a CVSS score of 6.8, this vulnerability is of medium severity, indicating that an attacker could achieve partial confidentiality, integrity, and availability impacts with moderate attack complexity. While not listed on the KEV catalog, an exploit for this vulnerability is publicly available on ExploitDB, though there is no evidence of active exploitation or significant community discussion.