CVE-2020-9341: Auieo Candidats

High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days.

CandidATS 2.1.0 is vulnerable to CSRF that allows for an administrator account to be added via the index.php?m=settings&a=addUser URI.

Affected products

• Auieo Candidats: version 2.1.0 only

Published 2020-02-22. Last modified 2026-06-17.