CVE-2020-21861

HIGH

Duxcms - Unrestricted File Upload

Title source: rule

File upload vulnerability in DuxCMS 2.1 allows attackers to execute arbitrary php code via duxcms/AdminUpload/upload.

gitee 3 stars

by annyshow · phpwriteup

CVSS v3 8.8

EPSS 0.0010

EPSS Percentile 26.6%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-434

Status published

Products (1)

duxcms_project/duxcms 2.1

Published Jul 06, 2023

Tracked Since Feb 18, 2026