CVE-2020-13156

CVE-2020-13156 describes a Cross-Site Request Forgery (CSRF) vulnerability in NukeViet 4.4, specifically within the modules\users\admin\add_user.php component, allowing an attacker to add a new user account. This medium-severity vulnerability (CVSS 6.5) has a network attack vector and low attack complexity, requiring user interaction but potentially leading to high integrity impact by creating unauthorized accounts. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.