CVE-2020-23837
A Cross-Site Request Forgery (CSRF) vulnerability in the Multi User plugin 1.8.2 for GetSimple CMS allows remote attackers to add admin (or other) users after an authenticated admin visits a third-party site or clicks on a URL.
CVSS 3.1 · 8.8 High
EPSS < 1%
KEV · Not listed
Vendors
Products