CVE-2020-19821: Wdoyo Doyocms

High severity, CVSS 8.8. EPSS: 0.9% chance of exploitation in the next 30 days.

A SQL injection vulnerability in admin.php of DOYOCMS 2.3 allows attackers to execute arbitrary SQL commands via the orders[] parameter.

Affected products

• Wdoyo Doyocms: version 2.3 only

Published 2021-08-26. Last modified 2026-06-17.