CVE-2020-19964: Phpmywind

Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days.

A Cross Site Request Forgery (CSRF) vulnerability was discovered in PHPMyWind 5.6 which allows attackers to create a new administrator account without authentication.

Affected products

• Phpmywind Phpmywind: version 5.6 only

Published 2021-10-14. Last modified 2026-07-09.