CVE-2021-47800: b2evolution

Medium severity, CVSS 5.3. EPSS: 0.2% chance of exploitation in the next 30 days.

b2evolution 7.2.2 contains a cross-site request forgery vulnerability that allows attackers to modify admin account details without authentication. Attackers can craft a malicious HTML form to submit unauthorized changes to user profiles by tricking victims into loading a specially crafted webpage.

Affected products

• b2evolution b2evolution: version 7.2.2 only

Published 2026-01-16. Last modified 2026-06-17.