Duxcms Project

    Dashboard / Vendors

    Products: 1
    Vulnerabilities: 8
    Known Exploited: 0
    1
    Critical Level Threats
    2
    High Level Threats
    4
    Medium Level Threats
    1
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2024-37791

    DuxCMS3 v3.1.3 was discovered to contain a SQL injection vulnerability via the keyword parameter at /article/Content/index?class_id.

    Last Modified: Apr 15, 2026
    Published: Jun 18, 2024

    CVE-2020-36763

    Cross Site Scripting (XSS) vulnerability in DuxCMS 2.1 allows remote attackers to run arbitrary code via the content, time, copyfrom parameters when adding or editing a post.

    Last Modified: Nov 21, 2024
    Published: Jul 31, 2023

    CVE-2020-21881

    Cross Site Request Forgery (CSRF) vulnerability in admin.php in DuxCMS 2.1 allows remote attackers to modtify application data via article/admin/content/add.

    Last Modified: Nov 21, 2024
    Published: Jul 31, 2023

    CVE-2020-21861

    File upload vulnerability in DuxCMS 2.1 allows attackers to execute arbitrary php code via duxcms/AdminUpload/upload.

    Last Modified: Nov 21, 2024
    Published: Jul 06, 2023

    CVE-2020-21862

    Directory traversal vulnerability in DuxCMS 2.1 allows attackers to delete arbitrary files via /admin/AdminBackup/del.

    Last Modified: Nov 21, 2024
    Published: Jul 06, 2023
    Items Per Page
    Duxcms_Project Vulnerabilities & Security CVEs | CVE-DB