CVE-2020-27997

CVE-2020-27997 is a high-severity Cross-Site Request Forgery (CSRF) vulnerability affecting SmartStoreNET versions prior to 4.1.0. This flaw allows an attacker to potentially elevate privileges, such as creating an administrative account, if a logged-in user is tricked into clicking a malicious link. With a CVSS score of 8.8, the vulnerability is easily exploitable over the network with low attack complexity, posing a significant risk to confidentiality, integrity, and availability. While there is no evidence of active exploitation, nor publicly available exploit code or significant community discussion, the potential impact warrants attention.