PT-2024-23695 · Dedecms · Dedecms

Name of the Vulnerable Software and Affected Versions: DedeCMS version 5.7 Description: A Cross-Site Request Forgery CSRF issue was found in DedeCMS via the /src/dede/member scores.php endpoint. This allows for malicious requests to be made on behalf of the user. Recommendations: For DedeCMS...