CVE-2020-18416

PoC —

CVSS 3.1

6.8 medium

EPSS

<1%p30

Published

Jun 27, 2023 (Jun 27, 2023)

Modified

Jun 17, 2026

Description

An cross site request forgery (CSRF) vulnerability discovered in Jymusic v2.0.0.,that allows attackers to execute arbitrary code via /admin.php?s=/addons/config.html&id=6 to modify payment information.

Vendors: jyuu
Products: jymusic
Weakness: CWE-352
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news0 stories

No ingested article mentions this CVE yet.