TI-2020-13417 CVE-2020-18648 · GHSA-h2j4-3hpq-4rrxCross Site Request Forgery (CSRF) in JuQingCMS v1.0 allows remote attackers to gain local…Priority LOW 39Cross Site Request Forgery (CSRF) in JuQingCMS v1.0 allows remote attackers to gain local privileges via the component "JuQingCMS_v1.0/admin/index.php?c=administrator&a=add".CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00736 · Published 2021-06-22 · No fix listed CWE-352