Security Advisory
CVE-2020-12282
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
iSmartgate PRO 1.5.9 is vulnerable to CSRF via the busca parameter in the form used for searching for users, accessible via /index.php. (This can be combined with reflected XSS.)