← All advisories

Medium severity6.5NVD Advisory· Published Feb 18, 2020· Updated Jun 17, 2026

CVE-2020-9267

CVE-2020-9267

Description

SOPlanning 1.45 is vulnerable to a CSRF attack that allows for arbitrary user creation via process/xajax_server.php.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Soplanning/Soplanning2 versions
cpe:2.3:a:soplanning:soplanning:1.45:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:soplanning:soplanning:1.45:*:*:*:*:*:*:*
- (no CPE)range: =1.45
SOPlanning/SOPlanningdescription

Patches

Vulnerability mechanics

References

1

github.com/J3rryBl4nks/SOPlanning/blob/master/AddUserCSRF.mdnvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.