VULNERABILITY INTELLIGENCE

CVE-2020-20502

CVSS score6.5 MEDIUM

EPSS probability0.46%

CISA KEVNot currently listed

Published2023-06-20

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Description

Cross Site Request Forgery found in yzCMS v.2.0 allows a remote attacker to execute arbitrary code via the token check function.