CVE-2020-27533

A Cross Site Scripting (XSS) issue was discovered in the search feature of DedeCMS v.5.8 that allows malicious users to inject code into web pages, and other users will be affected when viewing web pages.

CVSS v3.1

5.4 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

CVSS v2.0

3.5 LOWAV:N/AC:M/Au:S/C:N/I:P/A:N

EPSS

3.56% chance of exploitation in the next 30 days, 89th percentile

Published

2020-10-22

Updated

2024-08-04

Proof-of-concept exploits (1)

• http://packetstormsecurity.com/files/159772/DedeCMS-5.8-Cross-Site-Scripting.html

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/48974

Exploit collections (1)

• tzwlhack/Vulnerability/blob/main/CVE-2020-27533%20DedeCMS%20v.5.8%E6%90%9C%E7%B4%A2%E5%8A…

References

• CVE Record
• NVD entry

Related

• CVE-2020-27524
• CVE-2020-27539
• CVE-2020-27523
• CVE-2020-27540
• CVE-2020-27518
• CVE-2020-27541