CVE-2019-20077: Typesettercms Typesetter

Medium severity, CVSS 4.3. EPSS: 0.4% chance of exploitation in the next 30 days.

The Typesetter CMS 5.1 logout functionality is affected by a CSRF vulnerability. The logout function of the admin panel is not protected by any CSRF tokens. An attacker can logout the user using this vulnerability.

Affected products

• Typesettercms Typesetter: version 5.1 only

Published 2020-01-05. Last modified 2026-06-17.