CVE-2020-21881: Duxcms Project Duxcms

Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days.

Cross Site Request Forgery (CSRF) vulnerability in admin.php in DuxCMS 2.1 allows remote attackers to modtify application data via article/admin/content/add.

Affected products

• Duxcms Project Duxcms: version 2.1 only

Published 2023-07-31. Last modified 2026-06-17.