PatchTheCVE: dswjcmshttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2020-19268: A cross-site request forgery (CSRF) in index.php/Dswjcms/User/tfAdd of Dswjcms 1.6.4 allows authenticated attahttps://patchthecve.com/cve/CVE-2020-19268.htmlhttps://patchthecve.com/cve/CVE-2020-19268.htmlWed, 17 Jun 2026 02:59:41 +0000MEDIUM 5.7: A cross-site request forgery (CSRF) in index.php/Dswjcms/User/tfAdd of Dswjcms 1.6.4 allows authenticated attackers to arbitrarily add administrator users.CVE-2020-19267: An issue in index.php/Dswjcms/Basis/resources of Dswjcms 1.6.4 allows attackers to execute arbitrary code via https://patchthecve.com/cve/CVE-2020-19267.htmlhttps://patchthecve.com/cve/CVE-2020-19267.htmlWed, 17 Jun 2026 02:59:41 +0000CRITICAL 9.8: An issue in index.php/Dswjcms/Basis/resources of Dswjcms 1.6.4 allows attackers to execute arbitrary code via uploading a crafted PHP file.CVE-2020-19266: A stored cross-site scripting (XSS) vulnerability in the index.php/Dswjcms/Site/articleList component of Dswjchttps://patchthecve.com/cve/CVE-2020-19266.htmlhttps://patchthecve.com/cve/CVE-2020-19266.htmlWed, 17 Jun 2026 02:59:41 +0000MEDIUM 6.1: A stored cross-site scripting (XSS) vulnerability in the index.php/Dswjcms/Site/articleList component of Dswjcms 1.6.4 allows attackers to execute arbitrary web scripts or HTML.CVE-2020-19265: A stored cross-site scripting (XSS) vulnerability in the index.php/Dswjcms/Basis/links component of Dswjcms 1.https://patchthecve.com/cve/CVE-2020-19265.htmlhttps://patchthecve.com/cve/CVE-2020-19265.htmlWed, 17 Jun 2026 02:59:41 +0000MEDIUM 6.1: A stored cross-site scripting (XSS) vulnerability in the index.php/Dswjcms/Basis/links component of Dswjcms 1.6.4 allows attackers to execute arbitrary web scripts or HTML.