CVE-2022-35196: Testlink

High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days.

TestLink v1.9.20 was discovered to contain a Cross-Site Request Forgery (CSRF) via /lib/plan/planView.php.

Affected products

• Testlink Testlink: version 1.9.20 only

Published 2022-09-20. Last modified 2026-06-17.