https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2020-21653.htmlhttps://patchthecve.com/cve/CVE-2020-21653.htmlWed, 17 Jun 2026 03:03:50 +0000CRITICAL 9.1: Myucms v2.2.1 contains a server-side request forgery (SSRF) in the component \controller\index.php, which can be exploited via the sj() method.https://patchthecve.com/cve/CVE-2020-21652.htmlhttps://patchthecve.com/cve/CVE-2020-21652.htmlWed, 17 Jun 2026 03:03:50 +0000CRITICAL 9.8: Myucms v2.2.1 contains a remote code execution (RCE) vulnerability in the component \controller\Config.php, which can be exploited via the addqq() method.https://patchthecve.com/cve/CVE-2020-21651.htmlhttps://patchthecve.com/cve/CVE-2020-21651.htmlWed, 17 Jun 2026 03:03:50 +0000CRITICAL 9.8: Myucms v2.2.1 contains a remote code execution (RCE) vulnerability in the component \controller\point.php, which can be exploited via the add() method.https://patchthecve.com/cve/CVE-2020-21650.htmlhttps://patchthecve.com/cve/CVE-2020-21650.htmlWed, 17 Jun 2026 03:03:50 +0000HIGH 8.8: Myucms v2.2.1 contains a remote code execution (RCE) vulnerability in the component \controller\Config.php, which can be exploited via the add() method.https://patchthecve.com/cve/CVE-2020-21649.htmlhttps://patchthecve.com/cve/CVE-2020-21649.htmlWed, 17 Jun 2026 03:03:49 +0000HIGH 8.1: Myucms v2.2.1 contains a server-side request forgery (SSRF) in the component \controller\index.php, which can be exploited via the sql() method.