CVE-2020-36495: XSS
Published Oct 22, 2021
·Updated
DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in the component filemanageview.php via the filename, mid, userid, and templet' parameters.
Affected Software
1 affected component
DedeCMS Dedecms=7.5-sp2
Event History
Oct 22, 2021
CVE Published
via MITRE·07:19 PM
Data Sourced
via MITRE·07:19 PM
Description
Frequently Asked Questions
1
What is CVE-2020-36495?
CVE-2020-36495 refers to multiple cross-site scripting (XSS) vulnerabilities in DedeCMS v7.5 SP2.
2
What is the severity of CVE-2020-36495?
The severity of CVE-2020-36495 is medium, with a severity value of 6.1.
3
What is the affected software for CVE-2020-36495?
The affected software for CVE-2020-36495 is DedeCMS version 7.5 SP2.
4
How do I fix CVE-2020-36495?
To fix CVE-2020-36495, it is recommended to update to a patched version of DedeCMS or apply the necessary security patches provided by the vendor.
5
What is the Common Weakness Enumeration (CWE) ID for CVE-2020-36495?
The Common Weakness Enumeration (CWE) ID for CVE-2020-36495 is CWE-79, which refers to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting').