CVE-2024-28675

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /dede/diyedit.php...

CVE-2024-28675

DedeCMS v5.7 is vulnerable to a Cross-Site Request Forgery (CSRF) attack via the /dede/diy_edit.php API endpoint. This vulnerability allows an attacker to perform unauthorized actions on behalf of an authenticated user. To remediate this issue, users are recommended to update to a newer version o...