CVE-2020-36491

CVE-2020-36491 affects DedeCMS v7.5 SP2. The vulnerability is described as multiple cross-site scripting (XSS) flaws in the components, notably tags_main.php, exploitable via the activepath, keyword, tag, fmdo=x&filename, CKEditor, and CKEditorFuncNum parameters. The connected sources reaffirm th...