CVE-2020-23046: XSS
Published Oct 22, 2021
·Updated
DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in the component tpl.php via the filename, mid, userid, and templet' parameters.
Affected Software
1 affected component
DedeCMS Dedecms=7.5-sp2
Event History
Oct 22, 2021
CVE Published
via MITRE·07:20 PM
Data Sourced
via MITRE·07:20 PM
Description
Frequently Asked Questions
1
What is CVE-2020-23046?
CVE-2020-23046 is a vulnerability in DedeCMS v7.5 SP2 that allows for multiple cross-site scripting (XSS) attacks.
2
How does CVE-2020-23046 affect DedeCMS?
CVE-2020-23046 affects DedeCMS v7.5 SP2 through cross-site scripting vulnerabilities in the tpl.php component.
3
What parameters in DedeCMS v7.5 SP2 are vulnerable to cross-site scripting (XSS) attacks?
The 'filename', 'mid', 'userid', and 'templet' parameters in DedeCMS v7.5 SP2 are vulnerable to cross-site scripting (XSS) attacks.
4
What is the severity of CVE-2020-23046?
CVE-2020-23046 has a severity rating of medium (6.1).
5
How can I fix CVE-2020-23046 in DedeCMS v7.5 SP2?
To fix CVE-2020-23046 in DedeCMS v7.5 SP2, make sure to implement proper input validation and sanitization to prevent cross-site scripting (XSS) attacks.