Desdev DedeCMS 跨站脚本漏洞

Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open-source content management system CMS of China Zhuozhuo network Desdev company. The system has content publishing, content management, content editing and content retrieval functions. A cross-site scripting vulnerability...

CVE-2023-40877

DedeCMS up to and including 5.7.110 was discovered to contain a cross-site scripting XSS vulnerability at /dede/freelistedit.php via the title parameter...

PT-2023-27681 · Dedecms · Dedecms

Name of the Vulnerable Software and Affected Versions: DedeCMS versions up to and including 5.7.110 Description: The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities are located at the "/dede/vote add.php" API endpoint via the votename and voteitem1...

CVE-2023-40874

DedeCMS up to and including 5.7.110 was discovered to contain multiple cross-site scripting XSS vulnerabilities at /dede/voteadd.php via the votename and voteitem1 parameters...

CVE-2023-40877

DedeCMS up to 5.7.110 contains an XSS vulnerability in /dede/freelist_edit.php via the title parameter. Affected: DedeCMS versions

PT-2023-27683

Name of the Vulnerable Software and Affected Versions DedeCMS versions up to and including 5.7.110 Description A cross-site scripting XSS issue was found in DedeCMS. The issue is located at the "/dede/freelist add.php" API endpoint via the title parameter. Recommendations For DedeCMS versions up ...

CVE-2023-40875

DedeCMS (Dream Weaving CMS) up to and including version 5.7.110 contains multiple cross‑site scripting (XSS) vulnerabilities in the vote_edit.php endpoint, exploitable via the votename and votenote parameters. The issue is described across multiple sources as XSS vulnerabilities affecting that pa...

CVE-2023-40876

DedeCMS up to version 5.7.110 has a cross-site scripting (XSS) vulnerability in /dede/freelist_add.php via the title parameter. The affected software is DedeCMS; the root cause is unsanitized input in the title field. Exploitation status and remediation details are not provided in the connected d...

CVE-2023-40876: Improper Neutralization of Input During Web Page Generation

DedeCMS up to and including 5.7.110 was discovered to contain a cross-site scripting XSS vulnerability at /dede/freelistadd.php via the title parameter...

CVE-2023-40875: Improper Neutralization of Input During Web Page Generation

DedeCMS up to and including 5.7.110 was discovered to contain multiple cross-site scripting XSS vulnerabilities at /dede/voteedit.php via the votename and votenote parameters...

CVE-2023-40874

DedeCMS (versions up to 5.7.110) contains multiple cross-site scripting (XSS) vulnerabilities in /dede/vote_add.php, exploitable via the votename and voteitem1 parameters. Root cause: input handling in that endpoint allows injected scripts. Impact: standard XSS risk; exact exploitation details an...

CVE-2023-36298

DedeCMS v5.7.109 has a File Upload vulnerability, leading to remote code execution RCE...

CVE-2023-36298

DedeCMS v5.7.109 has a File Upload vulnerability, leading to remote code execution RCE...

CVE-2023-36298

DedeCMS v5.7.109 has a File Upload vulnerability, leading to remote code execution RCE...

Design/Logic Flaw

DedeCMS v5.7.109 has a File Upload vulnerability, leading to remote code execution RCE...

Desdev DedeCMS Code Issue Vulnerability

Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open-source content management system CMS of China Zhuozhuo network Desdev company. The system has the functions of content publishing, content management, content editing and content retrieval. A security vulnerability exists ...

CVE-2023-36298: Unrestricted Upload of File with Dangerous Type

DedeCMS v5.7.109 has a File Upload vulnerability, leading to remote code execution RCE...

CVE-2023-36298

DedeCMS v5.7.109 has a File Upload vulnerability, leading to remote code execution RCE...

CVE-2023-36298

DedeCMS v5.7.109 has a File Upload vulnerability, leading to remote code execution RCE...

CVE-2023-36298

CVE-2023-36298 : The connected sources identify a file-upload vulnerability in DedeCMS v5.7.109 that can lead to remote code execution (RCE). The records do not specify the root cause details, affected subcomponents, exact exploit vectors, or a published fix/patch version. No in-the-wild exploita...