Medium severity5.3NVD Advisory· Published Mar 16, 2026· Updated Apr 15, 2026

CVE-2013-20005

Description

Qool CMS 2.0 RC2 contains a cross-site request forgery vulnerability that allows attackers to perform administrative actions by tricking logged-in users into visiting malicious web pages. Attackers can forge POST requests to the /admin/adduser endpoint with parameters like username, password, email, and level to create root-level user accounts without user consent.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Statamic/CMSllm-fuzzy
Range: = 2.0 RC2

Patches

Vulnerability mechanics

References

www.zeroscience.mk/en/vulnerabilities/ZSL-2013-5134.phpnvd
www.exploit-db.com/exploits/24627nvd
www.vulncheck.com/advisories/qool-cms-rc2-cross-site-request-forgery-via-addusernvd

News mentions

No linked articles in our index yet.

cvss	0.345
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000