← All advisories

Medium severity6.5NVD Advisory· Published Oct 6, 2021· Updated Jun 17, 2026

CVE-2020-21658

CVE-2020-21658

Description

A Cross-Site Request Forgery (CSRF) in WDJA CMS v1.5.2 allows attackers to arbitrarily add administrator accounts via a crafted URL.

Affected products

4

WDJA/wdjallm-fuzzy
Range: =1.5.2
Shadoweb/wdjallm-fuzzy
Range: =1.5.2
WDJA/CMS
cpe:2.3:a:wdja:wdja_cms:1.5.2:*:*:*:*:*:*:*
WDJA/CMSdescription

Patches

Vulnerability mechanics

References

1

github.com/shadoweb/wdja/issues/10nvdExploitIssue TrackingThird Party Advisory

News mentions

0

No linked articles in our index yet.