CVE-2020-23837

2020-09-2503:53:35

mitre

www.cve.org

cve-2020-23837

cross-site request forgery

multi user plugin

getsimple cms

remote attackers

admin users

third-party site

AI Score

8.7

Confidence

High

EPSS

0.003

Percentile

70.7%

JSON

A Cross-Site Request Forgery (CSRF) vulnerability in the Multi User plugin 1.8.2 for GetSimple CMS allows remote attackers to add admin (or other) users after an authenticated admin visits a third-party site or clicks on a URL.

References

get-simple.info/extend/plugin/multi-user/133/

www.exploit-db.com/exploits/48745