Lucene search
HistorySep 01, 2022 - 6:15 p.m.
CVE-2022-36583
cve-2022-36583
dedecms
xss
cross-site scripting
nvd
security vulnerability
6.1 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
0.001 Low
EPSS
Percentile
33.9%
DedeCMS V5.7.97 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities at /dede/co_do.php via the dopost, rpok, and aid parameters.
Affected configurations
Node
dedecmsdedecmsMatch5.7.97
| CPE | Name | Operator | Version |
|---|---|---|---|
| dedecms:dedecms | dedecms | eq | 5.7.97 |
Social References
More
Related
cnvd
cnvd
DedeCMS Cross-Site Scripting Vulnerability (CNVD-2022-62223)
2022-09-05 00:00:00
nvd
nvd
CVE-2022-36583
2022-09-01 18:15:09
prion
prion
Cross site scripting
2022-09-01 18:15:00
cvelist
cvelist
CVE-2022-36583
2022-09-01 17:50:47
6.1 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
0.001 Low
EPSS
Percentile
33.9%
Related for CVE-2022-36583