CVE-2020-21236: Damicms

High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days.

A vulnerability in /damicms-master/admin.php?s=/Article/doedit of DamiCMS v6.0 allows attackers to compromise and impersonate user accounts via obtaining a user's session cookie.

Affected products

• Damicms Damicms: version 6.0.0 only

Published 2021-12-27. Last modified 2026-06-17.