PatchTheCVEdswjcms vulnerabilities and fixes
Recent CVEs affecting dswjcms, with upgrade or downgrade steps. 4 tracked.
dswjcms has 4 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 0. Most recent: 2021-09-09. Highest priority: CVE-2020-19267 (score 63/100).
- CVE-2020-19268 MEDIUM 5.7 DOWNGRADE A cross-site request forgery (CSRF) in index.php/Dswjcms/User/tfAdd of Dswjcms 1.6.4 allows authenticated atta
- CVE-2020-19267 CRITICAL 9.8 DOWNGRADE An issue in index.php/Dswjcms/Basis/resources of Dswjcms 1.6.4 allows attackers to execute arbitrary code via
- CVE-2020-19266 MEDIUM 6.1 DOWNGRADE A stored cross-site scripting (XSS) vulnerability in the index.php/Dswjcms/Site/articleList component of Dswjc
- CVE-2020-19265 MEDIUM 6.1 DOWNGRADE A stored cross-site scripting (XSS) vulnerability in the index.php/Dswjcms/Basis/links component of Dswjcms 1.
FAQ
How do I fix dswjcms vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is dswjcms being exploited right now?
None of the tracked dswjcms CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which dswjcms CVE should I patch first?
CVE-2020-19267 currently ranks highest (63/100): An issue in index.php/Dswjcms/Basis/resources of Dswjcms 1.6.4 allows attackers to execute arbitrary code via .