Jeesns 1.4.2 contains a cross-site request forgery (CSRF) which allows attackers to escalate privileges and perform sensitive program operations.
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2020-19280.json"