CVE-2020-16632: Dedecms

Medium severity, CVSS 5.4. EPSS: 0.5% chance of exploitation in the next 30 days.

A XSS Vulnerability in /uploads/dede/action_search.php in DedeCMS V5.7 SP2 allows an authenticated user to execute remote arbitrary code via the keyword parameter.

Affected products

• Dedecms Dedecms: version 5.7 only

Published 2021-05-15. Last modified 2026-06-17.