CVEvulnerability
CVE-2020-27533
5.4 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2020-10-22
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.4 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
- CVSS 2.0 ([email protected])
- 3.5 LOW — AV:N/AC:M/Au:S/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
A Cross Site Scripting (XSS) issue was discovered in the search feature of DedeCMS v.5.8 that allows malicious users to inject code into web pages, and other users will be affected when viewing web pages.
Affected configurations
• dedecms dedecms 5.8
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://packetstormsecurity.com/files/159772/DedeCMS-5.8-Cross-Site-Scripting.html Exploit, Third Party Advisory, VDB Entry
- https://github.com/dedetech/issues/issues/16 Exploit, Issue Tracking, Third Party Advisory
- http://packetstormsecurity.com/files/159772/DedeCMS-5.8-Cross-Site-Scripting.html Exploit, Third Party Advisory, VDB Entry
- https://github.com/dedetech/issues/issues/16 Exploit, Issue Tracking, Third Party Advisory