CVE-2020-16632

CVE-2020-16632 is an XSS vulnerability in DedeCMS 5.7 SP2, described across multiple sources as allowing an authenticated user to execute remote arbitrary code via the keyword parameter in /uploads/dede/action_search.php. The connected documents confirm the affected software and the underlying is...