High severity8.8NVD Advisory· Published Jun 22, 2021· Updated Jun 17, 2026

CVE-2020-18648

Description

Cross Site Request Forgery (CSRF) in JuQingCMS v1.0 allows remote attackers to gain local privileges via the component "JuQingCMS_v1.0/admin/index.php?c=administrator&a=add".

Affected products

JuQingCMS/JuQingCMSdescription
GodEpic/JuQingCMSllm-create
Range: = 1.0
JuQingCMS/JuQingCMSllm-fuzzy
Range: = 1.0

Patches

Vulnerability mechanics

References

github.com/GodEpic/JuQingCMS/issues/1nvdExploitThird Party Advisory
github.com/PearlyNautilus/Security-Code-Review/issues/7nvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000