CVE-2020-36497

DedeCMS v7.5 SP2 contains multiple XSS vulnerabilities in the makehtml_homepage.php component, exploitable via the filename, mid, userid, and templet parameters. The CVE-2020-36497 entries across NVD/Red Hat/CNVD/CVE record confirm cross-site scripting weaknesses in this version. The connected so...

PT-2021-7901

Name of the Vulnerable Software and Affected Versions DedeCMS version 7.5 SP2 Description The issue is related to the lack of protection measures for the web page structure in the select media.php component of the DedeCMS content management system. This can be exploited by a remote attacker to...

PT-2021-7900

Name of the Vulnerable Software and Affected Versions DedeCMS version 7.5 SP2 Description The issue is related to multiple cross-site scripting XSS vulnerabilities in the component tags main.php. These vulnerabilities can be exploited via the activepath, keyword, tag, fmdo=x&filename, CKEditor, a...

PT-2021-7902

Name of the Vulnerable Software and Affected Versions DedeCMS version 7.5 SP2 Description The issue is related to the lack of protection measures for the web page structure in the file pic view.php component of the DedeCMS content management system. This can be exploited by a remote attacker to...

PT-2021-7899

Name of the Vulnerable Software and Affected Versions DedeCMS version 7.5 SP2 Description The issue is related to multiple cross-site scripting XSS vulnerabilities in the file manage view.php component. These vulnerabilities can be exploited via the activepath, keyword, tag, fmdo=x&filename,...

PT-2021-10822

Name of the Vulnerable Software and Affected Versions DedeCMS version 7.5 SP2 Description The issue is related to multiple cross-site scripting XSS vulnerabilities in the component tpl.php. These vulnerabilities can be exploited via the filename, mid, userid, and templet parameters. Recommendatio...

PT-2021-12063

Name of the Vulnerable Software and Affected Versions: DedeCMS version 7.5 SP2 Description: The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities are located in the mychannel edit.php component and can be exploited via the filename, mid, userid, and templet...

PT-2021-7898

Name of the Vulnerable Software and Affected Versions DedeCMS version 7.5 SP2 Description The issue is related to multiple cross-site scripting XSS vulnerabilities in the media main.php component. These vulnerabilities can be exploited via the activepath, keyword, tag, fmdo=x&filename, CKEditor,...

PT-2021-12066

Name of the Vulnerable Software and Affected Versions: DedeCMS version 7.5 SP2 Description: The issue concerns multiple cross-site scripting XSS vulnerabilities found in the makehtml homepage.php component. These vulnerabilities can be exploited via the filename, mid, userid, and templet...

PT-2021-12064

Name of the Vulnerable Software and Affected Versions: DedeCMS version 7.5 SP2 Description: The issue concerns multiple cross-site scripting XSS vulnerabilities found in the file manage view.php component. These vulnerabilities can be exploited via the filename, mid, userid, and templet parameter...

CVE-2020-23044: Improper Neutralization of Input During Web Page Generation

DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting XSS vulnerabilities in the component filepicview.php via the activepath, keyword, tag, fmdo=x&filename, CKEditor and CKEditorFuncNum parameters...

CVE-2020-23046: Improper Neutralization of Input During Web Page Generation

DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting XSS vulnerabilities in the component tpl.php via the filename, mid, userid, and templet' parameters...

CVE-2020-36490: Improper Neutralization of Input During Web Page Generation

DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting XSS vulnerabilities in the component filemanageview.php via the activepath, keyword, tag, fmdo=x&filename, CKEditor and CKEditorFuncNum parameters...

CVE-2020-36491: Improper Neutralization of Input During Web Page Generation

DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting XSS vulnerabilities in the component tagsmain.php via the activepath, keyword, tag, fmdo=x&filename, CKEditor and CKEditorFuncNum parameters...

CVE-2020-36492: Improper Neutralization of Input During Web Page Generation

DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting XSS vulnerabilities in the component selectmedia.php via the activepath, keyword, tag, fmdo=x&filename, CKEditor and CKEditorFuncNum parameters...

CVE-2020-36494: Improper Neutralization of Input During Web Page Generation

DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting XSS vulnerabilities in the component mychanneledit.php via the filename, mid, userid, and templet' parameters...

CVE-2020-36493: Improper Neutralization of Input During Web Page Generation

DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting XSS vulnerabilities in the component mediamain.php via the activepath, keyword, tag, fmdo=x&filename, CKEditor and CKEditorFuncNum parameters...

CVE-2020-36495: Improper Neutralization of Input During Web Page Generation

DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting XSS vulnerabilities in the component filemanageview.php via the filename, mid, userid, and templet' parameters...

CVE-2020-36496: Improper Neutralization of Input During Web Page Generation

DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting XSS vulnerabilities in the component sysadminuseredit.php via the filename, mid, userid, and templet' parameters...

CVE-2020-36497: Improper Neutralization of Input During Web Page Generation

DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting XSS vulnerabilities in the component makehtmlhomepage.php via the filename, mid, userid, and templet' parameters...