system
Describe <CVE-2018-18842>.
user
What is <CVE-2018-18842>?
assistant
CSRF exists in zb_users/plugin/AppCentre/theme.js.php in Z-BlogPHP 1.5.2.1935 (Zero), which allows remote attackers to execute arbitrary PHP code..