CVE-2020-19263: Mipcms

High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days.

A cross-site request forgery (CSRF) in MipCMS v5.0.1 allows attackers to arbitrarily escalate user privileges to administrator via index.php?s=/user/ApiAdminUser/itemEdit.

Affected products

• Mipcms Mipcms: version 5.0.1 only

Published 2021-09-09. Last modified 2026-06-17.