A Cross-Site Request Forgery (CSRF) in GilaCMS v1.11.4 allows authenticated attackers to arbitrarily add administrator accounts.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-20693
Reference (s):
- https://github.com/GilaCMS/gila/issues/51