CVE-2020-20514 – A Cross-Site Request Forgery (CSRF) in Maccms v10 via admin.php/admin/adm

A Cross-Site Request Forgery (CSRF) in Maccms v10 via admin.php/admin/admin/del/ids/.html allows authenticated attackers to delete all users.

Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-20514

Reference (s):

• https://github.com/magicblack/maccms10/issues/76