CVE-2020-19264

creationtimestamp| type| source ---|---|--- 2021-09-09 22:29:53+00:00| seen| https://t.me/cibsecurity/28617...

CVE-2020-19264

MipCMS v5.0.1 has a cross-site request forgery (CSRF) vulnerability in the user-creation path index.php?s=/user/ApiAdminUser/itemAdd. The root cause is insufficient validation/CSRF protection, allowing an attacker to arbitrarily add users without authentication. The CVE-2020-19264 entry is refere...