CVE-2020-36763: Duxcms Project Duxcms

Medium severity, CVSS 5.4. EPSS: 0.5% chance of exploitation in the next 30 days.

Cross Site Scripting (XSS) vulnerability in DuxCMS 2.1 allows remote attackers to run arbitrary code via the content, time, copyfrom parameters when adding or editing a post.

Affected products

• Duxcms Project Duxcms: version 2.1 only

Published 2023-07-31. Last modified 2026-06-17.