CVE-2020-20945: Qibosoft

High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days.

A Cross-Site Request Forgery (CSRF) in /admin/index.php?lfj=member&action=editmember of Qibosoft v7 allows attackers to arbitrarily add administrator accounts.

Affected products

• Qibosoft Qibosoft: version 7.0 only

Published 2021-12-27. Last modified 2026-06-17.