What is GHSA-6qjf-g23v-vfj8?

GHSA-6qjf-g23v-vfj8 is a security advisory published by GitHub Security Advisories with Medium severity. A cross site request forgery (CSRF) vulnerability in the /xyhai.php?s=/Auth/editUser URI of...

Which CVE IDs does GHSA-6qjf-g23v-vfj8 cover?

GHSA-6qjf-g23v-vfj8 covers the following CVE IDs: CVE-2020-20586. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-6qjf-g23v-vfj8?

GHSA-6qjf-g23v-vfj8 has a CVSS v3 base score of 4.5, published by GitHub Security Advisories.

GHSA-6qjf-g23v-vfj8MediumCVSS 4.5

A cross site request forgery (CSRF) vulnerability in the /xyhai.php?s=/Auth/editUser URI of...

Vendor

GitHub Security Advisories

Published

May 24, 2022

Last Modified

July 5, 2026

🔗 CVE IDs covered (1)

CVE-2020-20586 →

📋 Description

A cross site request forgery (CSRF) vulnerability in the /xyhai.php?s=/Auth/editUser URI of XYHCMS V3.6 allows attackers to edit any information of the administrator such as the name, e-mail, and password.

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2020-20586
https://github.com/0xyu/PHP_Learning/issues/4
http://www.xyhcms.com/Show/download/id/2/at/0.html
http://xyhcms.com
https://github.com/advisories/GHSA-6qjf-g23v-vfj8