CVE-2020-20343

Published September 1st, 2021

View on NVD ↗

CVSS v3

6.5

MEDIUM

CVSS v2

4.3

MEDIUM

Affected

PROJECT

Description

WTCMS 1.0 contains a cross-site request forgery (CSRF) vulnerability in the index.php?g=admin&m=nav&a=add_post component that allows attackers to arbitrarily add articles in the administrator background.

taosir/wtcms

基于thinkphp的内容管理系统，可快速搭建个人博客、公司学校官网、新闻类站点。

GitHub

113