CVE-2020-21862: Duxcms Project Duxcms

High severity, CVSS 8.1. EPSS: 1% chance of exploitation in the next 30 days.

Directory traversal vulnerability in DuxCMS 2.1 allows attackers to delete arbitrary files via /admin/AdminBackup/del.

Affected products

• Duxcms Project Duxcms: version 2.1 only

Published 2023-07-06. Last modified 2026-06-17.