Search Results (2 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2020-36763 1 Duxcms Project 1 Duxcms 2024-11-21 5.4 Medium
Cross Site Scripting (XSS) vulnerability in DuxCMS 2.1 allows remote attackers to run arbitrary code via the content, time, copyfrom parameters when adding or editing a post.
CVE-2020-21881 1 Duxcms Project 1 Duxcms 2024-11-21 6.5 Medium
Cross Site Request Forgery (CSRF) vulnerability in admin.php in DuxCMS 2.1 allows remote attackers to modtify application data via article/admin/content/add.