CVE-2020-19159: Laiketui

High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days.

Cross Site Request Forgery (CSRF) in LaikeTui v3 allows remote attackers to execute arbitrary code via the component '/index.php?module=member&action=add'.

Affected products

• Laiketui Laiketui: version 3.0 only

Published 2021-09-15. Last modified 2026-06-17.