Wdoyo Doyocms — known CVE vulnerabilities

Every CVE whose affected-product data names Wdoyo Doyocms, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2020-19821 — CVSS 8.8 (high): A SQL injection vulnerability in admin.php of DOYOCMS 2.3 allows attackers to execute arbitrary SQL commands via the orders[] parameter.
• CVE-2019-9551 — CVSS 4.8 (medium): An issue was discovered in DOYO (aka doyocms) 2.3 through 2015-05-06. It has admin.php XSS.