Dr.Nano

**Name of the Vulnerable Software and Affected Versions** Utopia News Pro (UNP) versions 1.4.0 and earlier **Description** A cross-site request forgery (CSRF) issue exists, allowing remote attackers to hijack the authentication of administrators for requests that add administrator accounts. This is related to the upload/users.php file. **Recommendations** For versions 1.4.0 and earlier, update to a version later than 1.4.0 to resolve the issue. As a temporary workaround, consider restricting access to the upload/users.php file to minimize the risk of exploitation.