high8.8
CVE-2020-20671
A cross-site request forgery (CSRF) in KiteCMS V1.1 allows attackers to arbitrarily add an administrator account.
Impact
A cross-site request forgery (CSRF) in KiteCMS V1.1 allows attackers to arbitrarily add an administrator account.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Kitesky | Kitecms | Version 1.1 |