CVE-2020-27533
MEDIUM 5.4EPSS 3.6%
A Cross Site Scripting (XSS) issue was discovered in the search feature of DedeCMS v.5.8 that allows malicious users to inject code into web pages, and other users will be affected when viewing web pages.
- CVSS v3.1 NVD
- 5.4 MEDIUM
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N - CVSS v2.0 NVD
- 3.5 LOW
AV:N/AC:M/Au:S/C:N/I:P/A:N - EPSS
- 3.56% chance of exploitation in the next 30 days, 89th percentile
- Published
- 2020-10-22
- Updated
- 2024-08-04
Proof-of-concept exploits (1)
ExploitDB entries (1)
Exploit collections (1)
- CVE-2020-27533 DedeCMS v.5.8搜索功能 "keyword"参数XSS漏洞 PoC.mdtzwlhack/Vulnerability