CVE-2021-3242: Duxcms Project Duxcms

Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days.

DuxCMS v3.1.3 was discovered to contain a SQL injection vulnerability via the component s/tools/SendTpl/index?keyword=.

Affected products

• Duxcms Project Duxcms: version 3.1.3 only

Published 2022-02-16. Last modified 2026-06-17.