CVE-2020-18418

A Cross site request forgery (CSRF) vulnerability was discovered in FeiFeiCMS v4.1.190209, which allows attackers to create administrator accounts via /index.php?s=Admin-Admin-Insert.

CVSS v3.1

8.8 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.38% chance of exploitation in the next 30 days, 31th percentile

Published

2023-06-27

Updated

2024-12-04

Proof-of-concept exploits (1)

• GodEpic/Vulnerability-detection/blob/master/feifeicms/poc

References

• CVE Record
• NVD entry

Related

• CVE-2020-18410
• CVE-2020-18413
• CVE-2020-18414
• CVE-2020-18648
• CVE-2020-18416
• CVE-2020-18442