Medium severity6.1NVD Advisory· Published Jan 11, 2021· Updated Jun 17, 2026

CVE-2020-23631

Description

Cross-site request forgery (CSRF) in admin/global/manage.php in WDJA CMS 1.5 allows remote attackers to conduct cross-site scripting (XSS) attacks via the tongji parameter.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WDJA/wdjallm-fuzzy
Range: =1.5
Shadoweb/wdjallm-fuzzy
Range: =1.5
WDJA CMS/WDJA CMSdescription
WDJA/CMS
cpe:2.3:a:wdja:wdja_cms:1.5:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

github.com/shadoweb/wdja/issues/11nvdExploitThird Party Advisory
www.cnblogs.com/wayne-tao/p/13110663.htmlnvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.397
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000