CVE-2024-33371

2024-04-3000:00:00

mitre

www.cve.org

cross site scripting

dedecms

remote code execution

AI Score

7.2

Confidence

High

EPSS

Percentile

9.0%

JSON

Cross Site Scripting vulnerability in DedeCMS v.5.7.113 allows a remote attacker to execute arbitrary code via the typeid parameter in the makehtml_list_action.php component.

References

gitee.com/zchuanwen/cve/issues/I9HQRY