high8.8
CVE-2020-8985
ZendTo prior to 5.22-2 Beta allowed reflected XSS and CSRF via the unlock.tpl unlock user functionality.
Impact
ZendTo prior to 5.22-2 Beta allowed reflected XSS and CSRF via the unlock.tpl unlock user functionality.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zend | Zendto | Versions 3.10, 3.11, 3.12, 3.13, 3.20, 3.51 |