MediumCVSS 6.4
EPSS 2.2%
Public exploit
xGB.php in xGB 2.0 does not require authentication for an admin edit action, which allows remote attackers to make unspecified changes via an unknown series of steps.