Medium severity6.5NVD Advisory· Published Jun 4, 2021· Updated Jun 17, 2026
CVE-2020-36140
CVE-2020-36140
Description
BloofoxCMS 0.5.2.1 allows Cross-Site Request Forgery (CSRF) via 'mode=settings&page=editor', as demonstrated by use of 'mode=settings&page=editor' to change any file content (Locally/Remotely).
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:bloofox:bloofoxcms:0.5.2.1:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:bloofox:bloofoxcms:0.5.2.1:*:*:*:*:*:*:*
- (no CPE)range: =0.5.2.1
- BloofoxCMS/BloofoxCMSdescription
Patches
Vulnerability mechanics
References
1- muteb.io/2020/12/29/BloofoxCMS-Multiple-Vulnerabilities.htmlnvdExploitThird Party AdvisoryURL Repurposed
News mentions
0No linked articles in our index yet.