CVE-2020-18648

2021-06-2214:25:45

mitre

www.cve.org

juqingcms

csrf

vulnerability

remote attackers

privileges escalation

AI Score

8.9

Confidence

High

EPSS

0.002

Percentile

62.1%

JSON

Cross Site Request Forgery (CSRF) in JuQingCMS v1.0 allows remote attackers to gain local privileges via the component “JuQingCMS_v1.0/admin/index.php?c=administrator&a=add”.

References

github.com/GodEpic/JuQingCMS/issues/1

github.com/PearlyNautilus/Security-Code-Review/issues/7