wdja records
5 published records for vendor wdja.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 1
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-352 Cross-Site Request Forgery (CSRF)2
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
5 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
40Plan | CVE-2020-20982Proof of concept | Cross Site Scripting (XSS) vulnerability in shadoweb wdja v1.5.1, allows attackers to execute arbitrary code and gain escalated privileges, wdja · wdja cms · CWE-79 | Critical9.6 | — | 6.1% | Nov 3, 2021 |
39Monitor | CVE-2021-42185No exploit | wdja v2.1 is affected by a SQL injection vulnerability in the foreground search function.wdja · wdja · CWE-89 | Critical9.8 | — | 1.0% | May 4, 2022 |
36Monitor | CVE-2020-21648No exploit | WDJA CMS v1.5.2 contains an arbitrary file deletion vulnerability in the component admin/cache/manage.php.wdja · wdja cms | Critical9.1 | — | 1.3% | Oct 6, 2021 |
26Monitor | CVE-2020-21658No exploit | A Cross-Site Request Forgery (CSRF) in WDJA CMS v1.5.2 allows attackers to arbitrarily add administrator accounts via a crafted URL.wdja · wdja cms · CWE-352 | Medium6.5 | — | 0.4% | Oct 6, 2021 |
24Monitor | CVE-2020-23631No exploit | Cross-site request forgery (CSRF) in admin/global/manage.php in WDJA CMS 1.5 allows remote attackers to conduct cross-site scripting (XSS) awdja · wdja cms · CWE-352 | Medium6.1 | — | 0.4% | Jan 11, 2021 |
- CVE-2020-2098240Plan
Cross Site Scripting (XSS) vulnerability in shadoweb wdja v1.5.1, allows attackers to execute arbitrary code and gain escalated privileges,
CriticalCVSS 9.6Proof of conceptEPSS 6%wdja · wdja cmsNov 3, 2021
- CVE-2021-4218539Monitor
wdja v2.1 is affected by a SQL injection vulnerability in the foreground search function.
CriticalCVSS 9.8No exploitEPSS 1%wdja · wdjaMay 4, 2022
- CVE-2020-2164836Monitor
WDJA CMS v1.5.2 contains an arbitrary file deletion vulnerability in the component admin/cache/manage.php.
CriticalCVSS 9.1No exploitEPSS 1%wdja · wdja cmsOct 6, 2021
- CVE-2020-2165826Monitor
A Cross-Site Request Forgery (CSRF) in WDJA CMS v1.5.2 allows attackers to arbitrarily add administrator accounts via a crafted URL.
MediumCVSS 6.5No exploitEPSS 0%wdja · wdja cmsOct 6, 2021
- CVE-2020-2363124Monitor
Cross-site request forgery (CSRF) in admin/global/manage.php in WDJA CMS 1.5 allows remote attackers to conduct cross-site scripting (XSS) a
MediumCVSS 6.1No exploitEPSS 0%wdja · wdja cmsJan 11, 2021