Medium severity4.3NVD Advisory· Published Aug 28, 2020· Updated Jun 17, 2026

CVE-2020-16610

Description

Hoosk Codeigniter CMS before 1.7.2 is affected by a Cross Site Request Forgery (CSRF). When an attacker induces authenticated admin user to a malicious web page, any accounts can be deleted without admin user's intention.

Affected products

Hoosk/Hoosk2 versions
cpe:2.3:a:hoosk:hoosk:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:hoosk:hoosk:*:*:*:*:*:*:*:*range: <1.7.2
- (no CPE)range: <1.7.2
Hoosk/Hoosk Codeigniter CMSdescription

Patches

Vulnerability mechanics

References

github.com/havok89/Hoosk/pull/56nvdPatchThird Party Advisory
github.com/havok89/Hoosk/issues/53nvdExploitIssue TrackingThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.280
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000