CVE-2020-36495

DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting XSS vulnerabilities in the component filemanageview.php via the filename, mid, userid, and templet' parameters...

CVE-2020-23046

DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting XSS vulnerabilities in the component tpl.php via the filename, mid, userid, and templet' parameters...

CVE-2020-23055

ANCOM WLAN Controller Wireless Series & Hotspot WLC-1000 & WLC-4006 was discovered to contain multiple cross-site scripting XSS vulnerabilities in the /authen/start/ module via the userid and password parameters...

Cross site scripting

DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting XSS vulnerabilities in the component makehtmlhomepage.php via the filename, mid, userid, and templet' parameters...

CVE-2020-23046

DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting XSS vulnerabilities in the component tpl.php via the "filename", "mid", "userid", and templet' parameters...

CVE-2020-36495

DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting XSS vulnerabilities in the component filemanageview.php via the filename, mid, userid, and templet' parameters...

CVE-2020-36497

DedeCMS v7.5 SP2 contains multiple XSS vulnerabilities in the makehtml_homepage.php component, exploitable via the filename, mid, userid, and templet parameters. The CVE-2020-36497 entries across NVD/Red Hat/CNVD/CVE record confirm cross-site scripting weaknesses in this version. The connected so...

Desdev DedeCMS 跨站脚本漏洞

DedeCMS Dream Weaving Content Management System is a set of simple, robust, flexible, open source several characteristics of open source content management system. A cross-site scripting vulnerability exists in DedeCMS version 7.5 SP2, which can be exploited to inject malicious script code via th...

Desdev DedeCMS 跨站脚本漏洞

DedeCMS Dream Weaving Content Management System is a set of simple, robust, flexible, open source several characteristics of open source content management system. DedeCMS has a cross-site scripting vulnerability that can be exploited to inject malicious script code via the filename, mid, userid ...

Desdev DedeCMS 跨站脚本漏洞

DedeCMS Dream Weaving Content Management System is a set of simple, robust, flexible, open source several characteristics of open source content management system. DedeCMS has a cross-site scripting vulnerability that can be exploited to inject malicious script code via the filename, mid, userid ...

PT-2021-10830

Name of the Vulnerable Software and Affected Versions ANCOM WLAN Controller Wireless Series & Hotspot versions not specified Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities are located in the /authen/start/ module and can be exploited via th...

PT-2021-10822

Name of the Vulnerable Software and Affected Versions DedeCMS version 7.5 SP2 Description The issue is related to multiple cross-site scripting XSS vulnerabilities in the component tpl.php. These vulnerabilities can be exploited via the filename, mid, userid, and templet parameters. Recommendatio...

PT-2021-12063

Name of the Vulnerable Software and Affected Versions: DedeCMS version 7.5 SP2 Description: The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities are located in the mychannel edit.php component and can be exploited via the filename, mid, userid, and templet...

PT-2021-12066

Name of the Vulnerable Software and Affected Versions: DedeCMS version 7.5 SP2 Description: The issue concerns multiple cross-site scripting XSS vulnerabilities found in the makehtml homepage.php component. These vulnerabilities can be exploited via the filename, mid, userid, and templet...

PT-2021-12064

Name of the Vulnerable Software and Affected Versions: DedeCMS version 7.5 SP2 Description: The issue concerns multiple cross-site scripting XSS vulnerabilities found in the file manage view.php component. These vulnerabilities can be exploited via the filename, mid, userid, and templet parameter...

PT-2021-12065

Name of the Vulnerable Software and Affected Versions: DedeCMS version 7.5 SP2 Description: The issue concerns multiple cross-site scripting XSS vulnerabilities found in the sys admin user edit.php component. These vulnerabilities can be exploited via the filename, mid, userid, and templet...

CVE-2020-23046: Improper Neutralization of Input During Web Page Generation

DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting XSS vulnerabilities in the component tpl.php via the filename, mid, userid, and templet' parameters...

CVE-2020-23055: Improper Neutralization of Input During Web Page Generation

ANCOM WLAN Controller Wireless Series & Hotspot WLC-1000 & WLC-4006 was discovered to contain multiple cross-site scripting XSS vulnerabilities in the /authen/start/ module via the userid and password parameters...

CVE-2020-36494: Improper Neutralization of Input During Web Page Generation

DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting XSS vulnerabilities in the component mychanneledit.php via the filename, mid, userid, and templet' parameters...

CVE-2020-36495: Improper Neutralization of Input During Web Page Generation

DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting XSS vulnerabilities in the component filemanageview.php via the filename, mid, userid, and templet' parameters...