CVSS: 5.4EPSS: 0%CPEs: 1EXPL: 1CVE-2020-23044
https://notcve.org/view.php?id=CVE-2020-23044
DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in the component file_pic_view.php via the `activepath`, `keyword`, `tag`, `fmdo=x&filename`, `CKEditor` and `CKEditorFuncNum` parameters. Se ha detectado que DedeCMS versión v7.5 SP2 contiene múltiples vulnerabilidades de tipo cross-site scripting (XSS) en el componente file_pic_view.php por medio de los parámetros "activepath", "keyword", "tag", "fmdo=x&filename", "CKEditor" y "CKEditorFuncNum" • https://www.vulnerability-lab.com/get_content.php?id=2195 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 1CVE-2020-23046
https://notcve.org/view.php?id=CVE-2020-23046
DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in the component tpl.php via the `filename`, `mid`, `userid`, and `templet' parameters. Se ha detectado que DedeCMS versión v7.5 SP2, contiene múltiples vulnerabilidades de tipo cross-site scripting (XSS) en el componente tpl.php por medio de los parámetros "filename", "mid", "userid" y "templet" • https://www.vulnerability-lab.com/get_content.php?id=2194 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 5.4EPSS: 0%CPEs: 1EXPL: 1CVE-2020-36490
https://notcve.org/view.php?id=CVE-2020-36490
DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in the component file_manage_view.php via the `activepath`, `keyword`, `tag`, `fmdo=x&filename`, `CKEditor` and `CKEditorFuncNum` parameters. Se ha detectado que DedeCMS versión v7.5 SP2, contiene múltiples vulnerabilidades de tipo cross-site scripting (XSS) en el componente file_manage_view.php por medio de los parámetros "activepath", "keyword", "tag", "fmdo=x&filename", "CKEditor" y "CKEditorFuncNum" • https://www.vulnerability-lab.com/get_content.php?id=2195 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 5.4EPSS: 0%CPEs: 1EXPL: 1CVE-2020-36491
https://notcve.org/view.php?id=CVE-2020-36491
DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in the component tags_main.php via the `activepath`, `keyword`, `tag`, `fmdo=x&filename`, `CKEditor` and `CKEditorFuncNum` parameters. Se ha detectado que DedeCMS versión v7.5 SP2, contiene múltiples vulnerabilidades de tipo cross-site scripting (XSS) en el componente tags_main.php por medio de los parámetros "activepath", "keyword", "tag", "fmdo=x&filename", "CKEditor" y "CKEditorFuncNum" • https://www.vulnerability-lab.com/get_content.php?id=2195 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 5.4EPSS: 0%CPEs: 1EXPL: 1CVE-2020-36492
https://notcve.org/view.php?id=CVE-2020-36492
DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in the component select_media.php via the `activepath`, `keyword`, `tag`, `fmdo=x&filename`, `CKEditor` and `CKEditorFuncNum` parameters. Se ha detectado que DedeCMS versión v7.5 SP2, contiene múltiples vulnerabilidades de tipo cross-site scripting (XSS) en el componente select_media.php por medio de los parámetros "activepath", "keyword", "tag", "fmdo=x&filename", "CKEditor" y "CKEditorFuncNum" • https://www.vulnerability-lab.com/get_content.php?id=2195 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •