Magmi Project: >> Magmi >> 0.7.24 Security Vulnerabilities
Currently, all versions of MAGMI are vulnerable to CSRF due to the lack of CSRF tokens. RCE (via phpcli command) is possible in the event that a CSRF is leveraged against an existing admin session for MAGMI.
CVSS Score
8.8
EPSS Score
0.752
Published
2020-09-01