VULNERABILITY INTELLIGENCE

CVE-2020-21252

CVSS score8.8 HIGH

EPSS probability0.43%

CISA KEVNot currently listed

Published2023-06-20

Last modified2026-06-17

Description

Cross Site Request Forgery vulnerability in Neeke HongCMS 3.0.0 allows a remote attacker to execute arbitrary code and escalate privileges via the updateusers parameter.