CVE-2018-20603: Lfdycms Lei Feng Tv CMS

High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days.

Lei Feng TV CMS (aka LFCMS) 3.8.6 allows admin.php?s=/Member/add.html CSRF.

Affected products

• Lfdycms Lei Feng Tv CMS: version 3.8.6 only

Published 2018-12-30. Last modified 2026-06-17.