CVE-2020-13474: Nchsoftware Express Accounts

Medium severity, CVSS 6.5. EPSS: 0.8% chance of exploitation in the next 30 days.

In NCH Express Accounts 8.24 and earlier, an authenticated low-privilege user can enter a crafted URL to access higher-privileged functionalities such as Add/Edit users.

Affected products

• Nchsoftware Express Accounts: up to and including 8.24

Published 2020-12-28. Last modified 2026-06-17.