CVE-2020-18409

PoC —

CVSS 3.1

6.8 medium

EPSS

<1%p25

Published

Jun 27, 2023 (Jun 27, 2023)

Modified

Jun 17, 2026

Description

Cross Site Request Forgery (CSRF) vulnerability was discovered in CatfishCMS 4.8.63 that would allow attackers to obtain administrator permissions via /index.php/admin/index/modifymanage.html.

Vendors: catfishcms project
Products: catfishcms
Weakness: CWE-352
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news0 stories

No ingested article mentions this CVE yet.