Medium severity5.4NVD Advisory· Published Oct 22, 2021· Updated Jun 17, 2026

CVE-2020-23044

Description

DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in the component file_pic_view.php via the activepath, keyword, tag, fmdo=x&filename, CKEditor and CKEditorFuncNum parameters.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Dedecms/Dedecms2 versions
cpe:2.3:a:dedecms:dedecms:7.5:sp2:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:dedecms:dedecms:7.5:sp2:*:*:*:*:*:*
- (no CPE)range: 7.5 SP2
DedeCMS/DedeCMSdescription

Patches

Vulnerability mechanics

References

www.vulnerability-lab.com/get_content.phpnvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.351
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000