CVE-2021-31631: b2evolution CMS

High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days.

b2evolution CMS v7.2.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the User login page. This vulnerability allows attackers to escalate privileges.

Affected products

• b2evolution b2evolution CMS: version 7.2.3 only

Published 2021-12-06. Last modified 2026-06-17.