CVE-2017-17730

DedeCMS ≤ 5.7 is affected by a SQL Injection vulnerability in the logo parameter of plus/flink_add.php. The issue stems from unsanitized input in that parameter, enabling potential SQL injection. Severity is reflected in CVE data (NVD: high/critical depending on metric). No explicit remediation o...