CVE-2020-36497

DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting XSS vulnerabilities in the component makehtmlhomepage.php via the filename, mid, userid, and templet' parameters...

PT-2021-12063

Name of the Vulnerable Software and Affected Versions: DedeCMS version 7.5 SP2 Description: The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities are located in the mychannel edit.php component and can be exploited via the filename, mid, userid, and templet...

CVE-2020-36497: Improper Neutralization of Input During Web Page Generation

DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting XSS vulnerabilities in the component makehtmlhomepage.php via the filename, mid, userid, and templet' parameters...

Desdev DedeCMS 跨站脚本漏洞

DedeCMS Dream Weaving Content Management System is a set of simple, robust, flexible, open source several characteristics of open source content management system. DedeCMS has a cross-site scripting vulnerability that can be exploited to inject malicious script code via the filename, mid, userid ...

Desdev DedeCMS 跨站脚本漏洞

DedeCMS Dream Weaving Content Management System is a set of simple, robust, flexible, open source several characteristics of open source content management system. DedeCMS has a cross-site scripting vulnerability that can be exploited to inject malicious script code via the filename, mid, userid ...

PT-2021-7902

Name of the Vulnerable Software and Affected Versions DedeCMS version 7.5 SP2 Description The issue is related to the lack of protection measures for the web page structure in the file pic view.php component of the DedeCMS content management system. This can be exploited by a remote attacker to...

PT-2021-12066

Name of the Vulnerable Software and Affected Versions: DedeCMS version 7.5 SP2 Description: The issue concerns multiple cross-site scripting XSS vulnerabilities found in the makehtml homepage.php component. These vulnerabilities can be exploited via the filename, mid, userid, and templet...

CVE-2020-36495: Improper Neutralization of Input During Web Page Generation

DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting XSS vulnerabilities in the component filemanageview.php via the filename, mid, userid, and templet' parameters...

Desdev DedeCMS 跨站脚本漏洞

DedeCMS Dream Weaving Content Management System is a set of simple, robust, flexible, open source several characteristics of open source content management system. DedeCMS has a cross-site scripting vulnerability that can be exploited to inject malicious script code via the filename, mid, userid ...

PT-2021-12065

Name of the Vulnerable Software and Affected Versions: DedeCMS version 7.5 SP2 Description: The issue concerns multiple cross-site scripting XSS vulnerabilities found in the sys admin user edit.php component. These vulnerabilities can be exploited via the filename, mid, userid, and templet...

CVE-2020-36494: Improper Neutralization of Input During Web Page Generation

DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting XSS vulnerabilities in the component mychanneledit.php via the filename, mid, userid, and templet' parameters...

CVE-2020-23044: Improper Neutralization of Input During Web Page Generation

DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting XSS vulnerabilities in the component filepicview.php via the activepath, keyword, tag, fmdo=x&filename, CKEditor and CKEditorFuncNum parameters...

CVE-2020-36496: Improper Neutralization of Input During Web Page Generation

DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting XSS vulnerabilities in the component sysadminuseredit.php via the filename, mid, userid, and templet' parameters...

PT-2021-7898

Name of the Vulnerable Software and Affected Versions DedeCMS version 7.5 SP2 Description The issue is related to multiple cross-site scripting XSS vulnerabilities in the media main.php component. These vulnerabilities can be exploited via the activepath, keyword, tag, fmdo=x&filename, CKEditor,...

Desdev DedeCMS 跨站脚本漏洞

DedeCMS Dream Weaving Content Management System is a set of simple, robust, flexible, open source several characteristics of open source content management system. DedeCMS has a cross-site scripting vulnerability that can be exploited to inject malicious script code via the activepath, keyword,...

Desdev DedeCMS 跨站脚本漏洞

DedeCMS Dream Weaving Content Management System is a set of simple, robust, flexible, open source several characteristics of open source content management system. DedeCMS has a cross-site scripting vulnerability that can be exploited to inject malicious script code via the activepath, keyword,...

PT-2021-7900

Name of the Vulnerable Software and Affected Versions DedeCMS version 7.5 SP2 Description The issue is related to multiple cross-site scripting XSS vulnerabilities in the component tags main.php. These vulnerabilities can be exploited via the activepath, keyword, tag, fmdo=x&filename, CKEditor, a...

PT-2021-7901

Name of the Vulnerable Software and Affected Versions DedeCMS version 7.5 SP2 Description The issue is related to the lack of protection measures for the web page structure in the select media.php component of the DedeCMS content management system. This can be exploited by a remote attacker to...

CVE-2020-36492: Improper Neutralization of Input During Web Page Generation

DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting XSS vulnerabilities in the component selectmedia.php via the activepath, keyword, tag, fmdo=x&filename, CKEditor and CKEditorFuncNum parameters...

PT-2021-7899

Name of the Vulnerable Software and Affected Versions DedeCMS version 7.5 SP2 Description The issue is related to multiple cross-site scripting XSS vulnerabilities in the file manage view.php component. These vulnerabilities can be exploited via the activepath, keyword, tag, fmdo=x&filename,...