Chemcms Project Chemcms vulnerabilities

• chemcms project chemcms ChemCMS 1.0.6 has XSS via the "setting -> website information" field. CVE-2018-16346 4.8 MediumSeptember 2, 2018
• chemcms project chemcms ChemCMS v1.0.6 has CSRF by using public/admin/user/addpost.html to add an administrator account. CVE-2018-10295 8.8 HighApril 22, 2018