CVE-2020-37054 — Navigate CMS 2.8.7 - Cross-Site Request Forgery
Navigate CMS 2.8.7 contains a cross-site request forgery vulnerability that allows attackers to upload malicious extensions through a crafted HTML page. Attackers can trick auth…
Published: 2026-01-30 · CVSS: 5.1 · CVSS 4.0
Navigate CMS 2.8.7 contains a cross-site request forgery vulnerability that allows attackers to upload malicious extensions through a crafted HTML page. Attackers can trick authenticated administrators into executing arbitrary file uploads by leveraging the extension upload functionality without additional validation.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7