CVE-2024-28670

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /dede/freelistmain.php...

CVE-2024-28670

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /dede/freelistmain.php...

CVE-2024-28670

DedeCMS v5.7 is susceptible to a Cross-Site Request Forgery (CSRF) vulnerability via the /dede/freelist_main.php endpoint. This vulnerability allows an attacker to perform unauthorized actions by tricking a victim's browser into making requests to the CMS. While the impact is noted as partial wit...