exploitDog

CVE-2020-27533

Опубликовано: 22 окт. 2020

Источник: nvd

CVSS3: 5.4

CVSS2: 3.5

EPSS Низкий

Описание

A Cross Site Scripting (XSS) issue was discovered in the search feature of DedeCMS v.5.8 that allows malicious users to inject code into web pages, and other users will be affected when viewing web pages.

Ссылки

http://packetstormsecurity.com/files/159772/DedeCMS-5.8-Cross-Site-Scripting.html
Exploit
Third Party Advisory
VDB Entry
https://github.com/dedetech/issues/issues/16
Exploit
Issue Tracking
Third Party Advisory
http://packetstormsecurity.com/files/159772/DedeCMS-5.8-Cross-Site-Scripting.html
Exploit
Third Party Advisory
VDB Entry
https://github.com/dedetech/issues/issues/16
Exploit
Issue Tracking
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:dedecms:dedecms:5.8:*:*:*:*:*:*:*

EPSS

Процентиль: 70%

0.00629

Низкий

5.4 Medium

CVSS3

3.5 Low

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-4h46-x889-rgg3

CVSS3: 5.4

github

больше 3 лет назад

A Cross Site Scripting (XSS) issue was discovered in the search feature of DedeCMS v.5.8 that allows malicious users to inject code into web pages, and other users will be affected when viewing web pages.

EPSS

Процентиль: 70%

0.00629

Низкий

5.4 Medium

CVSS3

3.5 Low

CVSS2

Дефекты

CWE-79