CVE-2020-36494

DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting XSS vulnerabilities in the component mychanneledit.php via the filename, mid, userid, and templet' parameters...

CVE-2020-36494

DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting XSS vulnerabilities in the component mychanneledit.php via the filename, mid, userid, and templet' parameters...

CVE-2020-36494

CVE-2020-36494 : Affects DedeCMS v7.5 SP2. The component involved is mychannel_edit.php, with multiple cross-site scripting (XSS) vulnerabilities exploitable via the parameters filename, mid, userid, and templet. The connected documents reiterate the same description but do not provide explicit e...