DedeCMS v.5.8 - _keyword_ Cross-Site Scripting

Exploit Title: DedeCMS v.5.8 - "keyword" Cross-Site Scripting Date: 2020-07-27 Exploit Author: Noth Vendor Homepage: https://github.com/dedetech/DedeCMSv5 Software Link: https://github.com/dedetech/DedeCMSv5 Version: v.5.8 CVE : CVE-2020-27533 A Cross Site Scripting XSS issue was discovered in th...

CVE-2020-27533

A Cross Site Scripting XSS issue was discovered in the search feature of DedeCMS v.5.8 that allows malicious users to inject code into web pages, and other users will be affected when viewing web pages...

CVE-2020-27533

CVE-2020-27533 concerns an XSS in DedeCMS v5.8, specifically in the search feature. The available connected documents identify the affected component as the search functionality (action_search.php) and confirm a cross-site scripting vulnerability that allows injected script to be executed by othe...