CVE-2020-36763

5.4 mediumEPSS 0.5%

Medium (5.4) in duxcms project duxcms. EPSS 0.5% chance of exploitation in the next 30 days.

Cross Site Scripting (XSS) vulnerability in DuxCMS 2.1 allows remote attackers to run arbitrary code via the content, time, copyfrom parameters when adding or editing a post.

Severity

CVSS 3.1

5.4 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 41% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2023-07-31
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

duxcms_project:duxcms

References

https://gitee.com/annyshow/DuxCMS2.1/issues/I183GG
https://gitee.com/annyshow/DuxCMS2.1/issues/I183GG

Check your stack JSON