CVE-2020-26522: Garfield Petshop Project Garfield Petshop

High severity, CVSS 8.8. EPSS: 0.8% chance of exploitation in the next 30 days.

A cross-site request forgery (CSRF) vulnerability in mod/user/act_user.php in Garfield Petshop through 2020-10-01 allows remote attackers to hijack the authentication of administrators for requests that create new administrative accounts.

Affected products

• Garfield Petshop Project Garfield Petshop: up to and including 2020-10-01

Published 2020-10-09. Last modified 2026-06-17.