CVE-2020-23837

A Cross-Site Request Forgery (CSRF) vulnerability in the Multi User plugin 1.8.2 for GetSimple CMS allows remote attackers to add admin (or other) users after…

published September 25, 2020

CVSS
—
EPSS
1%
Percentile
56.7
In the wild
Unconfirmed
What it is

A Cross-Site Request Forgery (CSRF) vulnerability in the Multi User plugin 1.8.2 for GetSimple CMS allows remote attackers to add admin (or other) users after an authenticated admin visits a third-party site or clicks on a URL.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00818 · 56.7th percentile
Published
2020-09-25T03:53Z
EPSS history
Timeline
  • 25 SEP 03:53Z
    A Cross-Site Request Forgery (CSRF) vulnerability in the Multi User plugin 1.8.2 for GetSimple CMS allows remote attackers to add admin (or other) users after…
    cvelistv5