CVE-2020-36490

DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting XSS vulnerabilities in the component filemanageview.php via the activepath, keyword, tag, fmdo=x, CKEditor and CKEditorFuncNum parameters...

CVE-2020-36490

creationtimestamp| type| source ---|---|--- 2021-10-23 00:39:38+00:00| seen| https://t.me/cibsecurity/31066...

CVE-2020-36490

CVE-2020-36490 affects DedeCMS v7.5 SP2; from the connected sources, the vulnerability is a set of cross-site scripting (XSS) flaws in the file_manage_view.php component that can be triggered through parameters activepath, keyword, tag, fmdo=x&filename, CKEditor, and CKEditorFuncNum. The root cau...