CVE-2024-28673

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /dede/mychanneledit.php...

CVE-2024-28673

The DedeCMS v5.7 content management system is vulnerable to a Cross-Site Request Forgery (CSRF) attack. The flaw is located in the /dede/mychannel_edit.php API endpoint. This vulnerability allows an attacker to perform unauthorized actions on behalf of an authenticated user. No newer version cont...