High severity8.1NVD Advisory· Published Dec 24, 2018· Updated Jun 17, 2026
CVE-2018-20422
CVE-2018-20422
Description
Discuz! DiscuzX 3.4, when WeChat login is enabled, allows remote attackers to bypass authentication by leveraging a non-empty #wechat#common_member_wechatmp to gain login access to an account via a plugin.php ac=wxregister request (the attacker does not have control over which account will be accessed).
Affected products
1Patches
Vulnerability mechanics
References
1- gitee.com/ComsenzDiscuz/DiscuzX/issues/IPRUInvdExploitIssue TrackingThird Party Advisory
News mentions
0No linked articles in our index yet.