VULNERABILITY INTELLIGENCE

CVE-2020-35273

CVSS score8 HIGH

EPSS probability0.57%

CISA KEVNot currently listed

Published2020-12-21

Last modified2026-07-09

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Description

EgavilanMedia User Registration & Login System with Admin Panel 1.0 is affected by Cross Site Request Forgery (CSRF) to remotely gain privileges in the User Profile panel. An attacker can update any user's account.

Weakness classification

nvd@nist.gov: CWE-352

Primary references

cve@mitre.org — Exploit, Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108 — Exploit, Third Party Advisory, VDB Entry