CVE-2020-36493

creationtimestamp| type| source ---|---|--- 2021-10-23 00:39:36+00:00| seen| https://t.me/cibsecurity/31065...

CVE-2020-36493

DedeCMS v7.5 SP2 contains multiple cross-site scripting (XSS) vulnerabilities in the media_main.php component, exploitable via the activepath, keyword, tag, fmdo=x&filename, CKEditor, and CKEditorFuncNum parameters. The connected sources confirm XSS in this specific version but do not provide exp...