high8.8
CVE-2020-13155
NukeViet Cross-Site Request Forgery (CSRF)
Impact
`clearsystem.php` in NukeViet 4.4 allows CSRF with resultant HTML injection via the deltype parameter to the `admin/index.php?nv=webtools&op=clearsystem` URI.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | nukeviet/nukeviet | = 4.4.0 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nukeviet | Nukeviet | Version 4.4 |