CVE-2020-21861: Duxcms Project Duxcms

High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days.

File upload vulnerability in DuxCMS 2.1 allows attackers to execute arbitrary php code via duxcms/AdminUpload/upload.

Affected products

• Duxcms Project Duxcms: version 2.1 only

Published 2023-07-06. Last modified 2026-06-17.