CVE-2020-23837

ALTO 8.8CVE-2020-23837 · Published 25/09/2020 · updated 17/06/2026

En resumen

CVE-2020-23837 es una vulnerabilidad ALTO (CVSS 8.8) que afecta a multi user (multi user project).
Probabilidad de explotación en los próximos 30 días (EPSS): 0.82%, mayor que el 57.4% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
multi user multi_user_project	`= 1.8.2`	No fix yet

Description

A Cross-Site Request Forgery (CSRF) vulnerability in the Multi User plugin 1.8.2 for GetSimple CMS allows remote attackers to add admin (or other) users after an authenticated admin visits a third-party site or clicks on a URL.

References

get-simple.info/extend/plugin/multi-user/133 · Third Party Advisory
exploit-db.com/exploits/48745 · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free