CVE-2020-10229

8.8 highEPSS 0.8%

High (8.8) in vtenext vtenext. EPSS 0.8% chance of exploitation in the next 30 days.

A CSRF issue in vtecrm vtenext 19 CE allows attackers to carry out unwanted actions on an administrator's behalf, such as uploading files, adding users, and deleting accounts.

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 0.8% chance of exploitation in the next 30 days; higher than 57% of CVEs (scores of 2026-10-31)
CWE: CWE-352
Published: 2020-09-14
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

vtenext:vtenext

References

https://sourceforge.net/projects/vtecrm/
https://vtenext.com/en/
https://www.exploit-db.com/exploits/48804
https://sourceforge.net/projects/vtecrm/
https://vtenext.com/en/

Check your stack JSON