high8.8
CVE-2020-18265
Cross Site Request Forgery (CSRF) in Simple-Log v1.6 allows remote attackers to gain privilege and execute arbitrary code via the component "Simple-Log/admin/a…
Impact
Cross Site Request Forgery (CSRF) in Simple-Log v1.6 allows remote attackers to gain privilege and execute arbitrary code via the component "Simple-Log/admin/admin.php?act=act_add_member".
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Simple-Log Project | Simple-Log | Version 1.6 |