TI-2020-13519 CVE-2020-19047 · GHSA-88c9-rr9p-5764Cross Site Request Forgey (CSRF) in iWebShop v5.3 allows remote atatckers to execute…Priority LOW 39Cross Site Request Forgey (CSRF) in iWebShop v5.3 allows remote atatckers to execute arbitrary code via malicious POST request to the component '/index.php?controller=system&action=admin_edit_act'.CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00712 · Published 2021-08-31 · No fix listed CWE-352