CVE-2024-28680

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /dede/diyadd.php...

CVE-2024-28680

DedeCMS version 5.7 is susceptible to a Cross-Site Request Forgery (CSRF) vulnerability. This security flaw is triggered via the /dede/diy_add.php API endpoint, allowing an attacker to perform unauthorized actions. While the documents do not provide specific remediation details other than the rec...