PT-2018-14645

Name of the Vulnerable Software and Affected Versions DedeCMS version 5.7 SP2 Description The issue allows for XSS attacks via the "/member/uploads select.php" endpoint for the keyword parameter. Recommendations For DedeCMS version 5.7 SP2, as a temporary workaround, consider restricting access t...