CVE-2020-36065

Publication date

2023-05-08 00:00:00

Family

mitre

State

PUBLISHED

Description

Cross Site Request Forgery (CSRF) vulnerability in FlyCms 1.0 allows attackers to add arbitrary administrator accounts via system/admin/admin_save.