Skip to content
OpenAdvisories

Vendor

b2evolution

2 known vulnerabilities.

Products

b2evolution 1 b2evolution CMS 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2021-47800

    b2evolution 7.2.2 - 'edit account details' Cross-Site Request Forgery (CSRF)

    b2evolution 7.2.2 contains a cross-site request forgery vulnerability that allows attackers to modify admin account details without authentication. Attackers can craft a malicious HTML form to submit unauthorized changes to user profiles by tricking victims i…

    b2evolution b2evolution