What’s Vulnerable › Vulnerabilities

CVE-2018-20423

• Severity: high (CVSS 8.1 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.2% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2018-12-24 · updated 2026-06-17

Description

Discuz! DiscuzX 3.4, when WeChat login is enabled, allows remote attackers to bypass a "disabled registration" setting by adding a non-existing wxopenid value to the plugin.php ac=wxregister query string.

Affected products

• Comsenz Discuzx: x3.4

References

• https://gitee.com/ComsenzDiscuz/DiscuzX/issues/IPRUI
• https://gitee.com/ComsenzDiscuz/DiscuzX/issues/IPRUI

Get alerted when CVE-2018-20423 or the next vulnerability affects your stack