CVE-2020-37106
Business Live Chat Software 1.0 contains a cross-site request forgery vulnerability that allows attackers to change user account roles without authentication. Attackers can craft a malicious HTML form to modify user privileges by submitting a POST request to the user creation endpoint with administrative access parameters.
Vendor
-
Product
-
CWE
Yayın Tarihi
2026-02-07 00:15:54
Güncelleme
2026-02-09 16:08:55
Source Identifier
disclosure@vulncheck.com
KEV Date Added
-