CVE-2021-26739

9.8 criticalEPSS 1.7%

Critical (9.8) in doyocms project doyocms. EPSS 1.7% chance of exploitation in the next 30 days.

SQL Injection vulnerability in pay.php in millken doyocms 2.3, allows attackers to execute arbitrary code, via the attribute parameter.

Severity

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.7% chance of exploitation in the next 30 days; higher than 76% of CVEs (scores of 2026-11-01)
CWE: CWE-89
Published: 2021-11-01
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19