CVE-2020-21658

Published October 6th, 2021

View on NVD ↗

CVSS v3

6.5

MEDIUM

CVSS v2

4.3

MEDIUM

Affected

1

PROJECT

Description

A Cross-Site Request Forgery (CSRF) in WDJA CMS v1.5.2 allows attackers to arbitrarily add administrator accounts via a crafted URL.

shadoweb/wdjaUNAVAILABLE

WDJA is based on (PHP)JTBC1.0 redevelop. website: www.wdja.net

GitHub

2