CVE-2022-48140

DedeCMS v5.7.97 was discovered to contain a cross-site scripting XSS vulnerability in the component /filemanageview.php?fmdo=edit&filename...

CVE-2020-36495

DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting XSS vulnerabilities in the component filemanageview.php via the filename, mid, userid, and templet' parameters...

DedeCMS V5.7 SP2 Has Arbitrary File Read Vulnerability

Weaving dream content management system DedeCms is a PHP open source website management system. DedeCMS V5.7 SP2 version of the filemanageview.php file there are arbitrary file reading vulnerability, attackers can use the vulnerability to obtain the site source code...