medium4.3
CVE-2020-36534
Cross-Site Request Forgery in easyii CMS
Impact
A vulnerability was found in easyii CMS. It has been classified as problematic. Affected is an unknown function of the file /admin/sign/out. The manipulation leads to cross site request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | noumo/easyii | <= 0.9 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Easyiicms | Easyiicms | All versions |