CVE-2020-13433: Adminpanel Project Adminpanel

Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days.

Jason2605 AdminPanel 4.0 allows SQL Injection via the editPlayer.php hidden parameter.

Affected products

• Adminpanel Project Adminpanel: version 4.0 only

Published 2020-05-24. Last modified 2026-06-17.