CVE-2020-15600: Cmsuno Project Cmsuno

Medium severity, CVSS 6.5. EPSS: 1.9% chance of exploitation in the next 30 days.

An issue was discovered in CMSUno before 1.6.1. uno.php allows CSRF to change the admin password.

Affected products

• Cmsuno Project Cmsuno: before 1.6.1 (fixed in 1.6.1)

Published 2020-07-07. Last modified 2026-06-17.