CVE-2020-36496: XSS
Published Oct 22, 2021
·Updated
DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in the component sysadminuseredit.php via the filename, mid, userid, and templet' parameters.
Affected Software
1 affected component
DedeCMS Dedecms=7.5-sp2
Event History
Oct 22, 2021
CVE Published
via MITRE·07:19 PM
Data Sourced
via MITRE·07:19 PM
Description
Frequently Asked Questions
1
What is the vulnerability ID CVE-2020-36496?
The vulnerability ID CVE-2020-36496 refers to multiple cross-site scripting (XSS) vulnerabilities in DedeCMS v7.5 SP2.
2
How severe is CVE-2020-36496?
CVE-2020-36496 has a severity rating of 6.1, which is considered medium.
3
Which component in DedeCMS v7.5 SP2 is affected by CVE-2020-36496?
The component sys_admin_user_edit.php is affected by CVE-2020-36496.
4
What are the parameters that are vulnerable to cross-site scripting (XSS) in CVE-2020-36496?
The parameters 'filename', 'mid', 'userid', and 'templet' in DedeCMS v7.5 SP2 are vulnerable to cross-site scripting (XSS) in CVE-2020-36496.
5
Are there any references for CVE-2020-36496?
Yes, you can find more information about CVE-2020-36496 at the following link: https://www.vulnerability-lab.com/get_content.php?id=2194