Known v1.3.1+2020120201 was discovered to allow attackers to perform an account takeover via a host header injection attack.
- https://blog.jitendrapatro.me/multiple-vulnerabilities-in-idno-known-php-cms-software/
No PoCs found on GitHub currently.