CVE-2020-23686

CVE-2020-23686 affects AyaCMS 3.1.2 and is a Cross-Site Request Forgery (CSRF) flaw stemming from the software’s lack of CSRF protection during administrator password changes, enabling an attacker to change the admin password (and potentially other impacts) as described in multiple security recor...