CVE-2020-21139: Ec Cloud E-Commerce System Project Ec Cloud E-Commerce System

Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days.

EC Cloud E-Commerce System v1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) which allows attackers to arbitrarily add admin accounts via /admin.html?do=user&act=add.

Affected products

• Ec Cloud E-Commerce System Project Ec Cloud E-Commerce System: version 1.3 only

Published 2021-11-04. Last modified 2026-06-17.