CVE-2023-49493

DedeCMS v5.7.111 was discovered to contain a reflective cross-site scripting XSS vulnerability via the v parameter at selectimages.php...

CVE-2023-49492

DedeCMS v5.7.111 was discovered to contain a reflective cross-site scripting XSS vulnerability via the imgstick parameter at selectimages.php...

CVE-2023-49492

DedeCMS v5.7.111 was discovered to contain a reflective cross-site scripting XSS vulnerability via the imgstick parameter at selectimages.php...

Cross site scripting

DedeCMS v5.7.111 was discovered to contain a reflective cross-site scripting XSS vulnerability via the v parameter at selectimages.php...

Desdev DedeCMS Security Breach

Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open-source content management system CMS of China Zhuozhuo network Desdev company. The system has the functions of content publishing, content management, content editing and content retrieval. A security vulnerability exists ...

CVE-2023-49493

DedeCMS v5.7.111 was discovered to contain a reflective cross-site scripting XSS vulnerability via the v parameter at selectimages.php...

CVE-2023-49492

DedeCMS v5.7.111 was discovered to contain a reflective cross-site scripting XSS vulnerability via the imgstick parameter at selectimages.php...

CVE-2023-49492

CVE-2023-49492 affects DedeCMS v5.7.111 with a reflective XSS vulnerability exploitable via the imgstick parameter on selectimages.php. Root cause: improper input handling in the imgstick parameter leading to script injection. Impact as stated: cross-site scripting risk; no exploit details provid...

CVE-2023-49493

DedeCMS v5.7.111 is affected by a reflective cross-site scripting (XSS) vulnerability in selectimages.php via the v parameter. CVSSv3.1 base score 6.1 (MEDIUM). Exploitation details and patches are not provided in the connected documents; no remediation/version fixes are stated.

CVE-2023-49492

DedeCMS v5.7.111 was discovered to contain a reflective cross-site scripting XSS vulnerability via the imgstick parameter at selectimages.php...

CVE-2023-49493

DedeCMS v5.7.111 was discovered to contain a reflective cross-site scripting XSS vulnerability via the v parameter at selectimages.php...

PT-2023-31245 · Dedecms · Dedecms

Name of the Vulnerable Software and Affected Versions: DedeCMS version 5.7.111 Description: A reflective cross-site scripting XSS issue was discovered in DedeCMS. The vulnerability is exploited via the imgstick parameter at the "selectimages.php" endpoint. This allows for malicious scripts to be...

CVE-2023-49493

DedeCMS v5.7.111 was discovered to contain a reflective cross-site scripting XSS vulnerability via the v parameter at selectimages.php...

CVE-2023-49492: Improper Neutralization of Input During Web Page Generation

DedeCMS v5.7.111 was discovered to contain a reflective cross-site scripting XSS vulnerability via the imgstick parameter at selectimages.php...

CVE-2023-49493: Improper Neutralization of Input During Web Page Generation

DedeCMS v5.7.111 was discovered to contain a reflective cross-site scripting XSS vulnerability via the v parameter at selectimages.php...

CVE-2023-49492

DedeCMS v5.7.111 was discovered to contain a reflective cross-site scripting XSS vulnerability via the imgstick parameter at selectimages.php...

PT-2023-31246

Name of the Vulnerable Software and Affected Versions DedeCMS version 5.7.111 Description A reflective cross-site scripting XSS issue was discovered in DedeCMS. The vulnerability is exploited via the v parameter at the "selectimages.php" endpoint. This allows an attacker to inject malicious scrip...

CVE-2023-43275

Cross-Site Request Forgery CSRF vulnerability in DedeCMS v5.7 in 110 backend management interface via /catalogadd.php, allows attackers to create crafted web pages due to a lack of verification of the token value of the submitted form...

CVE-2023-43275

Cross-Site Request Forgery CSRF vulnerability in DedeCMS v5.7 in 110 backend management interface via /catalogadd.php, allows attackers to create crafted web pages due to a lack of verification of the token value of the submitted form...

CVE-2023-43275

Cross-Site Request Forgery CSRF vulnerability in DedeCMS v5.7 in 110 backend management interface via /catalogadd.php, allows attackers to create crafted web pages due to a lack of verification of the token value of the submitted form...