high8.8
CVE-2020-36065
Cross Site Request Forgery (CSRF) vulnerability in FlyCms 1.0 allows attackers to add arbitrary administrator accounts via system/admin/admin_save.
Impact
Cross Site Request Forgery (CSRF) vulnerability in FlyCms 1.0 allows attackers to add arbitrary administrator accounts via system/admin/admin_save.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Flycms Project | Flycms | Version 1.0 |