CVE-2020-26641 | Severity.io

Description

A Cross Site Request Forgery (CSRF) vulnerability was discovered in iCMS 7.0.16 which can allow an attacker to execute arbitrary web scripts.

Related CPE's

Vulnerable

References

ExploitThird Party Advisory

ExploitThird Party Advisory

Weaknesses

Primary

CWE-352

CVSS impact metrics

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

8.8 · High

Information

Source identifier

Vulnerability status

Modified

Published

2021-05-28T20:15:07.500Z

5 years ago

Last modified

2026-06-17T03:08:17.073Z

3 months ago