CVE-2020-20586

MEDIUM 4.5CVE-2020-20586 · Published 08/07/2021 · updated 09/07/2026

In short

CVE-2020-20586 is a MEDIUM (CVSS 4.5) vulnerability affecting xyhcms (xyhcms).
Chance of exploitation in the next 30 days (EPSS): 0.39%, higher than 33.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
xyhcms xyhcms	`= 3.6`	No fix yet

Description

A cross site request forgery (CSRF) vulnerability in the /xyhai.php?s=/Auth/editUser URI of XYHCMS V3.6 allows attackers to edit any information of the administrator such as the name, e-mail, and password.

References

xyhcms.com/Show/download/id/2/at/0.html · Broken Link
0xyu/PHP_Learning · Exploit

More vulnerabilities in xyhcms

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free