Khodakhah · Nodcms · CVE-2020-20697
**Name of the Vulnerable Software and Affected Versions**
khodakhah NodCMS version 3.0
**Description**
The issue allows a remote attacker to execute arbitrary code and gain access to sensitive information via a crafted script to the `address` parameter. This can be done by an attacker with administrative privileges.
**Recommendations**
For khodakhah NodCMS version 3.0, consider disabling access to the `address` parameter until a patch is available. Restricting administrative privileges may also help minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.