Description
SOPlanning 1.45 is vulnerable to a CSRF attack that allows for arbitrary changing of the admin password via process/xajax_server.php.
Unscored
CVE-2020-9266
EUVD-2020-30095GHSA-fcj2-vhxh-rf9h
SOPlanning 1.45 is vulnerable to a CSRF attack that allows for arbitrary changing of the admin password via process/xajax_server.php.
Published Feb 18, 2020 · Updated Aug 4, 2024 · Assigned by mitre