CVE-2022-42246: Duofoxtechnologies Duofox CMS

High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days.

Doufox 0.0.4 contains a CSRF vulnerability that can add system administrator account.

Affected products

• Duofoxtechnologies Duofox CMS: version 0.0.4 only

Published 2022-11-17. Last modified 2026-06-17.