Description
forma.lms 2.3.0.2 is affected by Cross Site Request Forgery (CSRF) in formalms/appCore/index.php?r=lms/profile/show&ap=saveinfo via a GET request to change the admin email address in order to accomplish an account takeover.
Unscored
CVE-2020-26802
EUVD-2020-19338GHSA-vjjh-5286-68ch
forma.lms 2.3.0.2 is affected by Cross Site Request Forgery (CSRF) in formalms/appCore/index.php?r=lms/profile/show&ap=saveinfo via a GET r…
Published Oct 8, 2020 · Updated Aug 4, 2024 · Assigned by mitre