CVE-2020-19263

2021-09-0917:44:39

mitre

www.cve.org

csrf

mipcms v5.0.1

privilege escalation

AI Score

8.9

Confidence

High

EPSS

0.001

Percentile

43.2%

JSON

A cross-site request forgery (CSRF) in MipCMS v5.0.1 allows attackers to arbitrarily escalate user privileges to administrator via index.php?s=/user/ApiAdminUser/itemEdit.

References

github.com/sansanyun/mipcms5/issues/4