medium5.4Public exploit code
CVE-2020-27533
A Cross Site Scripting (XSS) issue was discovered in the search feature of DedeCMS v.5.8 that allows malicious users to inject code into web pages, and other u…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- DedeCMS v.5.8 - _keyword_ Cross-Site Scripting2020-10-30 · webapps · php
Impact
A Cross Site Scripting (XSS) issue was discovered in the search feature of DedeCMS v.5.8 that allows malicious users to inject code into web pages, and other users will be affected when viewing web pages.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dedecms | Dedecms | Version 5.8 |