CVE-2019-11374

CVE-2019-11374 describes a Cross-Site Request Forgery (CSRF) vulnerability in 74CMS version 5.0.1, allowing an attacker to add a new administrator user. This vulnerability has a high CVSS score of 8.8, indicating a critical risk due to its network-based attack vector, low attack complexity, and high potential for confidentiality, integrity, and availability impacts. While there is no evidence of active exploitation in the wild (KEV), an exploit is publicly available on ExploitDB, though it lacks Metasploit or Nuclei modules, and has received minimal community discussion or media coverage.