{"id":"CVE-2020-35273","aliases":["EUVD-2020-22951","GHSA-92h4-jh72-6gpm"],"status":"published","title":"EgavilanMedia User Registration \u0026 Login System with Admin Panel 1.0 is affected by Cross Site...","description":"EgavilanMedia User Registration \u0026 Login System with Admin Panel 1.0 is affected by Cross Site Request Forgery (CSRF) to remotely gain privileges in the User Profile panel. An attacker can update any user's account.","severity":{"version":"3.1","score":8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00569,"percentile":0.4743,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-352"],"published":"2020-12-21T14:51:09Z","modified":"2026-07-09T01:16:45Z","products":[{"vendor":"egavilanmedia","product":"user_registration_\\\u0026_login_system_with_admin_panel"}],"references":[{"url":"https://www.exploit-db.com/exploits/49151","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-35273"},{"url":"http://egavilanmedia.com"},{"url":"https://github.com/advisories/GHSA-92h4-jh72-6gpm"}],"sources":{"cve":[{"id":"CVE-2020-35273","description":"EgavilanMedia User Registration \u0026 Login System with Admin Panel 1.0 is affected by Cross Site Request Forgery (CSRF) to remotely gain privileges in the User Profile panel. An attacker can update any user's account.","status":"published","published":"2020-12-21T14:51:09Z","modified":"2026-07-09T00:12:13.404Z","updated_at":"2026-11-02T14:35:58.331892Z"}],"euvd":[{"id":"EUVD-2020-22951","description":"EgavilanMedia User Registration \u0026 Login System with Admin Panel 1.0 is affected by Cross Site Request Forgery (CSRF) to remotely gain privileges in the User Profile panel. An attacker can update any user's account.","status":"published","published":"2020-12-21T14:51:09Z","modified":"2026-07-09T00:12:13Z","updated_at":"2026-11-02T18:20:09.112703Z"}],"ghsa":[{"id":"GHSA-92h4-jh72-6gpm","title":"EgavilanMedia User Registration \u0026 Login System with Admin Panel 1.0 is affected by Cross Site...","description":"EgavilanMedia User Registration \u0026 Login System with Admin Panel 1.0 is affected by Cross Site Request Forgery (CSRF) to remotely gain privileges in the User Profile panel. An attacker can update any user's account.","status":"published","published":"2022-05-24T17:37:07Z","modified":"2026-07-05T00:32:21Z","cvss":[{"version":"3.1","score":8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-352"],"updated_at":"2026-11-02T15:09:14.897479Z"}],"nvd":[{"id":"CVE-2020-35273","description":"EgavilanMedia User Registration \u0026 Login System with Admin Panel 1.0 is affected by Cross Site Request Forgery (CSRF) to remotely gain privileges in the User Profile panel. An attacker can update any user's account.","status":"published","published":"2020-12-21T15:15:13.047Z","modified":"2026-07-09T01:16:45.27Z","cvss":[{"version":"3.1","score":8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":6,"vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-352"],"updated_at":"2026-11-02T14:06:27.73474Z"}]}}