{"id":"CVE-2020-27533","aliases":["EUVD-2020-20043","GHSA-4h46-x889-rgg3"],"status":"published","title":"A Cross Site Scripting (XSS) issue was discovered in the search feature of DedeCMS v.5.8 that...","description":"A Cross Site Scripting (XSS) issue was discovered in the search feature of DedeCMS v.5.8 that allows malicious users to inject code into web pages, and other users will be affected when viewing web pages.","severity":{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.03564,"percentile":0.89444,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-79"],"published":"2020-10-22T14:53:02Z","modified":"2026-06-17T03:09:16Z","exploits":[{"source":"exploitdb","id":"EDB-48974","title":"DedeCMS v.5.8 - _keyword_ Cross-Site Scripting","type":"webapps","platform":"php","date":"2020-10-30","url":"https://www.exploit-db.com/exploits/48974"}],"products":[{"vendor":"dedecms","product":"dedecms"}],"references":[{"url":"https://github.com/dedetech/issues/issues/16","tags":["x_refsource_MISC","x_transferred","Exploit","Issue Tracking","Third Party Advisory"]},{"url":"http://packetstormsecurity.com/files/159772/DedeCMS-5.8-Cross-Site-Scripting.html","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-27533"},{"url":"https://github.com/advisories/GHSA-4h46-x889-rgg3"}],"sources":{"cve":[{"id":"CVE-2020-27533","description":"A Cross Site Scripting (XSS) issue was discovered in the search feature of DedeCMS v.5.8 that allows malicious users to inject code into web pages, and other users will be affected when viewing web pages.","status":"published","published":"2020-10-22T14:53:02Z","modified":"2024-08-04T16:18:45.656Z","updated_at":"2026-11-02T14:35:53.236501Z"}],"euvd":[{"id":"EUVD-2020-20043","description":"A Cross Site Scripting (XSS) issue was discovered in the search feature of DedeCMS v.5.8 that allows malicious users to inject code into web pages, and other users will be affected when viewing web pages.","status":"published","published":"2020-10-22T14:53:02Z","modified":"2024-08-04T16:18:45Z","updated_at":"2026-11-03T03:07:12.435876Z"}],"ghsa":[{"id":"GHSA-4h46-x889-rgg3","title":"A Cross Site Scripting (XSS) issue was discovered in the search feature of DedeCMS v.5.8 that...","description":"A Cross Site Scripting (XSS) issue was discovered in the search feature of DedeCMS v.5.8 that allows malicious users to inject code into web pages, and other users will be affected when viewing web pages.","status":"published","published":"2022-05-24T17:31:59Z","modified":"2023-01-29T05:04:16Z","cvss":[{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:45:30.813688Z"}],"nvd":[{"id":"CVE-2020-27533","description":"A Cross Site Scripting (XSS) issue was discovered in the search feature of DedeCMS v.5.8 that allows malicious users to inject code into web pages, and other users will be affected when viewing web pages.","status":"published","published":"2020-10-22T15:15:13.423Z","modified":"2026-06-17T03:09:16.867Z","cvss":[{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":3.5,"vector":"AV:N/AC:M/Au:S/C:N/I:P/A:N","level":"low","assessor":"primary"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:06:20.704992Z"}]}}