CVE-2020-22273

MEDIUM

Neoflex Video Subscription System 2.0 - Cross-Site Request Forgery

Title source: llm

Neoflex Video Subscription System Version 2.0 is affected by CSRF which allows the Website's Settings to be changed (such as Payment Settings)

Core 2

Core References

Broken Link x_refsource_misc

Third Party Advisory x_refsource_misc

CVSS v3 6.5

EPSS 0.0040

EPSS Percentile 32.3%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

CWE

CWE-352

Status published

Products (1)

creativeitem/neoflex_video_subscription_system 2.0

Published Nov 04, 2020

Tracked Since Feb 18, 2026