PT-2023-30462 · Dedecms · Dedecms

Name of the Vulnerable Software and Affected Versions: DedeCMS version 5.7.110 Description: A critical issue was found in DedeCMS, affecting the /uploads/tags.php file. The manipulation of the tag alias argument leads to SQL injection. This issue can be exploited remotely. Recommendations: For...

CVE-2023-40877

DedeCMS up to and including 5.7.110 was discovered to contain a cross-site scripting XSS vulnerability at /dede/freelistedit.php via the title parameter...

CVE-2023-40877

DedeCMS up to and including 5.7.110 was discovered to contain a cross-site scripting XSS vulnerability at /dede/freelistedit.php via the title parameter...

CVE-2023-40875

DedeCMS up to and including 5.7.110 was discovered to contain multiple cross-site scripting XSS vulnerabilities at /dede/voteedit.php via the votename and votenote parameters...

CVE-2023-40874

DedeCMS up to and including 5.7.110 was discovered to contain multiple cross-site scripting XSS vulnerabilities at /dede/voteadd.php via the votename and voteitem1 parameters...

CVE-2023-40875

DedeCMS up to and including 5.7.110 was discovered to contain multiple cross-site scripting XSS vulnerabilities at /dede/voteedit.php via the votename and votenote parameters...

CVE-2023-40877

DedeCMS up to and including 5.7.110 was discovered to contain a cross-site scripting XSS vulnerability at /dede/freelistedit.php via the title parameter...

CVE-2023-40876

DedeCMS up to and including 5.7.110 was discovered to contain a cross-site scripting XSS vulnerability at /dede/freelistadd.php via the title parameter...

CVE-2023-40876

DedeCMS up to and including 5.7.110 was discovered to contain a cross-site scripting XSS vulnerability at /dede/freelistadd.php via the title parameter...

CVE-2023-40875

DedeCMS up to and including 5.7.110 was discovered to contain multiple cross-site scripting XSS vulnerabilities at /dede/voteedit.php via the votename and votenote parameters...

CVE-2023-40874

DedeCMS up to and including 5.7.110 was discovered to contain multiple cross-site scripting XSS vulnerabilities at /dede/voteadd.php via the votename and voteitem1 parameters...

Cross site scripting

DedeCMS up to and including 5.7.110 was discovered to contain a cross-site scripting XSS vulnerability at /dede/freelistedit.php via the title parameter...

Cross site scripting

DedeCMS up to and including 5.7.110 was discovered to contain multiple cross-site scripting XSS vulnerabilities at /dede/voteadd.php via the votename and voteitem1 parameters...

Cross site scripting

DedeCMS up to and including 5.7.110 was discovered to contain multiple cross-site scripting XSS vulnerabilities at /dede/voteedit.php via the votename and votenote parameters...

Cross site scripting

DedeCMS up to and including 5.7.110 was discovered to contain a cross-site scripting XSS vulnerability at /dede/freelistadd.php via the title parameter...

CVE-2023-40875

DedeCMS up to and including 5.7.110 was discovered to contain multiple cross-site scripting XSS vulnerabilities at /dede/voteedit.php via the votename and votenote parameters...

CVE-2023-40874

DedeCMS up to and including 5.7.110 was discovered to contain multiple cross-site scripting XSS vulnerabilities at /dede/voteadd.php via the votename and voteitem1 parameters...

CVE-2023-40877

DedeCMS up to and including 5.7.110 was discovered to contain a cross-site scripting XSS vulnerability at /dede/freelistedit.php via the title parameter...

CVE-2023-40876

DedeCMS up to and including 5.7.110 was discovered to contain a cross-site scripting XSS vulnerability at /dede/freelistadd.php via the title parameter...

CVE-2023-40877

DedeCMS up to and including 5.7.110 was discovered to contain a cross-site scripting XSS vulnerability at /dede/freelistedit.php via the title parameter...