CVE-2020-23631

Published January 11th, 2021

View on NVD ↗

CVSS v3

6.1

MEDIUM

CVSS v2

4.3

MEDIUM

Affected

PROJECT

Description

Cross-site request forgery (CSRF) in admin/global/manage.php in WDJA CMS 1.5 allows remote attackers to conduct cross-site scripting (XSS) attacks via the tongji parameter.

shadoweb/wdjaUNAVAILABLE

WDJA is based on (PHP)JTBC1.0 redevelop. website: www.wdja.net

GitHub