{"id":"CVE-2020-18418","aliases":["EUVD-2020-10342","GHSA-vg7q-4h76-hx2w"],"status":"published","title":"A Cross site request forgery (CSRF) vulnerability was discovered in FeiFeiCMS v4.1.190209, which...","description":"A Cross site request forgery (CSRF) vulnerability was discovered in FeiFeiCMS v4.1.190209, which allows attackers to create administrator accounts via /index.php?s=Admin-Admin-Insert.","severity":{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-11","score":0.00384,"percentile":0.32949,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-352"],"published":"2023-06-27T00:00:00Z","modified":"2026-06-17T02:59:18Z","products":[{"vendor":"feifeicms","product":"feifeicms"}],"references":[{"url":"https://github.com/GodEpic/Vulnerability-detection/blob/master/feifeicms/FeiFeiCMS_4.1_csrf.doc","tags":["x_transferred","Exploit","Third Party Advisory"]},{"url":"https://github.com/GodEpic/Vulnerability-detection/blob/master/feifeicms/poc","tags":["x_transferred","Exploit"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-18418"},{"url":"https://github.com/advisories/GHSA-vg7q-4h76-hx2w"}],"sources":{"cve":[{"id":"CVE-2020-18418","description":"A Cross site request forgery (CSRF) vulnerability was discovered in FeiFeiCMS v4.1.190209, which allows attackers to create administrator accounts via /index.php?s=Admin-Admin-Insert.","status":"published","published":"2023-06-27T00:00:00Z","modified":"2024-12-04T21:06:45.497Z","updated_at":"2026-11-02T14:35:59.434367Z"}],"euvd":[{"id":"EUVD-2020-10342","description":"A Cross site request forgery (CSRF) vulnerability was discovered in FeiFeiCMS v4.1.190209, which allows attackers to create administrator accounts via /index.php?s=Admin-Admin-Insert.","status":"published","published":"2023-06-27T00:00:00Z","modified":"2024-12-04T21:06:45Z","updated_at":"2026-11-03T00:04:40.891519Z"}],"ghsa":[{"id":"GHSA-vg7q-4h76-hx2w","title":"A Cross site request forgery (CSRF) vulnerability was discovered in FeiFeiCMS v4.1.190209, which...","description":"A Cross site request forgery (CSRF) vulnerability was discovered in FeiFeiCMS v4.1.190209, which allows attackers to create administrator accounts via /index.php?s=Admin-Admin-Insert.","status":"published","published":"2023-06-27T21:30:48Z","modified":"2024-04-04T05:12:53Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-352"],"updated_at":"2026-11-02T14:56:30.604932Z"}],"nvd":[{"id":"CVE-2020-18418","description":"A Cross site request forgery (CSRF) vulnerability was discovered in FeiFeiCMS v4.1.190209, which allows attackers to create administrator accounts via /index.php?s=Admin-Admin-Insert.","status":"published","published":"2023-06-27T19:15:09.047Z","modified":"2026-06-17T02:59:18.533Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-352"],"updated_at":"2026-11-02T14:06:47.910346Z"}]}}