CVE-2020-7993: Prototypejs Prototype

Medium severity, CVSS 4.3. EPSS: 0.7% chance of exploitation in the next 30 days.

Prototype 1.6.0.1 allows remote authenticated users to forge ticket creation (on behalf of other user accounts) via a modified email ID field.

Affected products

• Prototypejs Prototype: version 1.6.0.1 only

Published 2020-02-03. Last modified 2026-06-17.