CVE-2018-18578

CVE-2018-18578 affects DedeCMS 5.7 SP2. A cross-site scripting vulnerability exists in the plus/qrcode.php page via the type parameter, enabling injected script in affected contexts. Documented by multiple sources (CNVD, RH Red Hat, NVD, CVE list). Exploit details and fixes are not provided in th...