← All advisories

Medium severity6.5NVD Advisory· Published May 6, 2021· Updated Jun 17, 2026

CVE-2020-18889

CVE-2020-18889

Description

Cross Site Request Forgery (CSRF) vulnerability in puppyCMS v5.1 that can change the admin's password via /admin/settings.php.

Affected products

4

PuppyCMS/puppyCMS3 versions
cpe:2.3:a:puppycms:puppycms:5.1:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:puppycms:puppycms:5.1:*:*:*:*:*:*:*
- (no CPE)
- (no CPE)range: =5.1
choregus/puppyCMSllm-fuzzy
Range: =5.1

Patches

Vulnerability mechanics

References

1

github.com/choregus/puppyCMS/issues/13nvdExploitIssue TrackingThird Party Advisory

News mentions

0

No linked articles in our index yet.