1715 matches found
CVE-2023-40876
DedeCMS up to and including 5.7.110 was discovered to contain a cross-site scripting XSS vulnerability at /dede/freelistadd.php via the title parameter...
CVE-2023-40875
DedeCMS up to and including 5.7.110 was discovered to contain multiple cross-site scripting XSS vulnerabilities at /dede/voteedit.php via the votename and votenote parameters...
PT-2023-27684 · Dedecms · Dedecms
Name of the Vulnerable Software and Affected Versions: DedeCMS versions up to and including 5.7.110 Description: A cross-site scripting XSS issue was found in DedeCMS. The issue is located at the "/dede/freelist edit.php" API endpoint via the title parameter. Recommendations: For DedeCMS versions...
CVE-2023-40875
DedeCMS (Dream Weaving CMS) up to and including version 5.7.110 contains multiple cross‑site scripting (XSS) vulnerabilities in the vote_edit.php endpoint, exploitable via the votename and votenote parameters. The issue is described across multiple sources as XSS vulnerabilities affecting that pa...
CVE-2023-40874
DedeCMS up to and including 5.7.110 was discovered to contain multiple cross-site scripting XSS vulnerabilities at /dede/voteadd.php via the votename and voteitem1 parameters...
CVE-2023-40875
DedeCMS up to and including 5.7.110 was discovered to contain multiple cross-site scripting XSS vulnerabilities at /dede/voteedit.php via the votename and votenote parameters...
CVE-2023-40876
DedeCMS up to version 5.7.110 has a cross-site scripting (XSS) vulnerability in /dede/freelist_add.php via the title parameter. The affected software is DedeCMS; the root cause is unsanitized input in the title field. Exploitation status and remediation details are not provided in the connected d...
Desdev DedeCMS 跨站脚本漏洞
Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open-source content management system CMS of China Zhuozhuo network Desdev company. The system has content publishing, content management, content editing and content retrieval functions. A cross-site scripting vulnerability...
PT-2023-27682 · Dedecms · Dedecms
Name of the Vulnerable Software and Affected Versions: DedeCMS versions up to and including 5.7.110 Description: The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities are located at the "/dede/vote edit.php" API endpoint via the votename and votenote...
CVE-2023-40877
DedeCMS up to and including 5.7.110 was discovered to contain a cross-site scripting XSS vulnerability at /dede/freelistedit.php via the title parameter...
CVE-2023-40877
DedeCMS up to 5.7.110 contains an XSS vulnerability in /dede/freelist_edit.php via the title parameter. Affected: DedeCMS versions
CVE-2023-36298
DedeCMS v5.7.109 has a File Upload vulnerability, leading to remote code execution RCE...
CVE-2023-36298
DedeCMS v5.7.109 has a File Upload vulnerability, leading to remote code execution RCE...
CVE-2023-36298
DedeCMS v5.7.109 has a File Upload vulnerability, leading to remote code execution RCE...
Design/Logic Flaw
DedeCMS v5.7.109 has a File Upload vulnerability, leading to remote code execution RCE...
CVE-2023-36298
DedeCMS v5.7.109 has a File Upload vulnerability, leading to remote code execution RCE...
CVE-2023-36298
DedeCMS v5.7.109 has a File Upload vulnerability, leading to remote code execution RCE...
Desdev DedeCMS Code Issue Vulnerability
Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open-source content management system CMS of China Zhuozhuo network Desdev company. The system has the functions of content publishing, content management, content editing and content retrieval. A security vulnerability exists ...
CVE-2023-36298
CVE-2023-36298 : The connected sources identify a file-upload vulnerability in DedeCMS v5.7.109 that can lead to remote code execution (RCE). The records do not specify the root cause details, affected subcomponents, exact exploit vectors, or a published fix/patch version. No in-the-wild exploita...