Medium severity5.4NVD Advisory· Published Oct 22, 2020· Updated Jun 17, 2026

CVE-2020-27533

Description

A Cross Site Scripting (XSS) issue was discovered in the search feature of DedeCMS v.5.8 that allows malicious users to inject code into web pages, and other users will be affected when viewing web pages.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Dedecms/Dedecms2 versions
cpe:2.3:a:dedecms:dedecms:5.8:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:dedecms:dedecms:5.8:*:*:*:*:*:*:*
- (no CPE)range: =5.8
DedeCMS/DedeCMSdescription

Patches

Vulnerability mechanics

References

packetstormsecurity.com/files/159772/DedeCMS-5.8-Cross-Site-Scripting.htmlnvdExploitThird Party AdvisoryVDB Entry
github.com/dedetech/issues/issues/16nvdExploitIssue TrackingThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.351
epss	0.003
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000