A cross-site request forgery (CSRF) in Maccms 8.0 causes administrators to add and modify articles without their knowledge via clicking on a crafted URL.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-21081
Reference (s):
- https://github.com/magicblack/maccms8/issues/2