CVE-2018-20612: Asthis Universal Website Asthis

High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days.

UWA 2.3.11 allows index.php?g=admin&c=admin&a=add_admin_do CSRF.

Affected products

• Asthis Universal Website Asthis: version 2.3.11 only

Published 2018-12-30. Last modified 2026-06-17.