CVE-2020-21141 - iCMS v7.0.15 was discovered to contain a Cross-Site Request Forgery (CSRF) via /admincp.php?app=members&do=add

HIGH

iCMS v7.0.15 was discovered to contain a Cross-Site Request Forgery (CSRF) via /admincp.php?app=members&do=add

Published Nov 12, 2021

8.8

HIGH

CVSS 3.1

EPSS 0.55%

iCMS v7.0.15 was discovered to contain a Cross-Site Request Forgery (CSRF) via /admincp.php?app=members&do=add.

No remediation recorded yet.

Weaknesses (1)

CWE-352

CSRF

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-13918		Advisory
https://github.com/hxcc/just_for_fun/blob/master/ICMS%20CSRF		x_refsource_MISCExploitThird Party Advisory

No recorded changes yet.

Sources

Status PUBLISHED

Assigner mitre

Published Nov 12, 2021

Updated Aug 4, 2024

Reserved Aug 13, 2020

Updated n/a

Status Modified

Modified Jun 17, 2026

Severity n/a

Public date n/a

Assigner mitre

Published Nov 12, 2021

Updated Aug 4, 2024

Exploited since n/a