CVE-2020-20982

9.6 criticalEPSS 6.2%

Critical (9.6) in wdja wdja cms. EPSS 6.2% chance of exploitation in the next 30 days.

Cross Site Scripting (XSS) vulnerability in shadoweb wdja v1.5.1, allows attackers to execute arbitrary code and gain escalated privileges, via the backurl parameter to /php/passport/index.php.

Severity

CVSS 3.1

9.6 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

EPSS: 6.2% chance of exploitation in the next 30 days; higher than 93% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2021-11-03
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

wdja:wdja_cms

References

https://github.com/shadoweb/wdja/issues/1
https://github.com/shadoweb/wdja/issues/1

Check your stack JSON