CVE-2016-20053

CVE-2016-20053 describes a Cross-Site Request Forgery (CSRF) vulnerability in Redaxo CMS 5.2, enabling unauthenticated attackers to create administrative user accounts. This is accomplished by tricking an authenticated administrator into visiting a malicious page, which then silently submits a crafted form to add a new administrator without consent. Rated with a CVSS score of 5.3 (Medium), the vulnerability has a network attack vector and low complexity, primarily impacting data integrity by allowing unauthorized account creation. There is no indication of active exploitation, public exploit code availability, or significant community attention for this CVE.