CVE-2020-18648: Juqingcms

High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days.

Cross Site Request Forgery (CSRF) in JuQingCMS v1.0 allows remote attackers to gain local privileges via the component "JuQingCMS_v1.0/admin/index.php?c=administrator&a=add".

Affected products

• Juqingcms Juqingcms: version 1.0 only

Published 2021-06-22. Last modified 2026-06-17.