TI-2020-19352 CVE-2020-37217 · GHSA-pr64-7xqv-5pj3Easy2Pilot 7 Cross-Site Request Forgery via admin.phpPriority MEDIUM 56Easy2Pilot 7 contains a cross-site request forgery vulnerability that allows attackers to add unauthorized user accounts by tricking authenticated administrators into visiting malicious pages.CVSS 4.0MEDIUM 5.1· Network · No auth · User interaction · EPSS 0.0014 · Published 2026-05-13 · No fix listed CWE-352