CVE-2020-20586

2021-07-0815:44:32

mitre

www.cve.org

4.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

31.9%

JSON

A cross site request forgery (CSRF) vulnerability in the /xyhai.php?s=/Auth/editUser URI of XYHCMS V3.6 allows attackers to edit any information of the administrator such as the name, e-mail, and password.

References

www.xyhcms.com/Show/download/id/2/at/0.html

xyhcms.com

github.com/0xyu/PHP_Learning/issues/4