CVE-2020-16632

A XSS Vulnerability in /uploads/dede/action_search.php in DedeCMS V5.7 SP2 allows an authenticated user to execute remote arbitrary code via the keyword parameter.

Score

CVSS 3.1 5.4 Medium

Status

Modified - cve@mitre.org

Published

2021-05-15

Last modified

2024-08-04

Weaknesses

CWE-79

Affected products

• Dedecms (Dedecms)

References

• https://github.com/ky-j/dedecms/issues/12