packetstormsecurity.com
http://packetstormsecurity.com/files/159772/DedeCMS-5.8-Cross-Site-Scripting.html CVE-2020-27533
MEDIUM
DedeCMS v.5.8 - _keyword_ Cross-Site Scripting
Record summary
CVE-2020-27533 has a selected CVSS score of 5.4 (medium); EIP currently links 1 catalogued exploit.
Description
A Cross Site Scripting (XSS) issue was discovered in the search feature of DedeCMS v.5.8 that allows malicious users to inject code into web pages, and other users will be affected when viewing web pages.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBDedeCMS v.5.8 - _keyword_ Cross-Site ScriptingExploitDB exploitby NothNot analyzed1 file
References
3github.com
https://github.com/dedetech/issues/issues/16 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2020-27533