CVE-2020-18265

8.8 highEPSS 1.1%

High (8.8) in simple-log project simple-log. EPSS 1.1% chance of exploitation in the next 30 days.

Cross Site Request Forgery (CSRF) in Simple-Log v1.6 allows remote attackers to gain privilege and execute arbitrary code via the component "Simple-Log/admin/admin.php?act=act_add_member".

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 1.1% chance of exploitation in the next 30 days; higher than 64% of CVEs (scores of 2026-10-31)
CWE: CWE-352
Published: 2021-06-07
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

simple-log_project:simple-log

References

https://github.com/github123abc123/bird/issues/1
https://github.com/github123abc123/bird/issues/1

Check your stack JSON