Lucene search
+L
Wagecms ProjectWage-cms

1 matches found

CVE
CVE
added 2021/08/06 10:37 p.m.97 views

CVE-2020-21358

CVEs show a CSRF flaw in Wage-CMS 1.5.x-dev that enables an attacker to arbitrarily add users. The root cause is a cross-site request forgery in the web application, as reported across multiple sources (NVD, Red Hat, CNVD, CVE lists). The impact described is unauthorized user creation, with no ex...

6.5CVSS6.4AI score0.00443EPSS
Save