Lucene search
+L

8 matches found

RedhatCVE
RedhatCVE
•added 2025/12/30 1:02 a.m.•30 views

CVE-2024-30855

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /src/dede/makehtmllistaction.php...

8.8CVSS7.3AI score0.00217EPSS
SaveExploits1References1
OSV
OSV
•added 2025/12/29 8:15 p.m.•13 views

CVE-2024-30855

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /src/dede/makehtmllistaction.php...

8.8CVSS5.8AI score0.00217EPSS
SaveExploits1References2
NVD
NVD
•added 2025/12/29 8:15 p.m.•18 views

CVE-2024-30855

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /src/dede/makehtmllistaction.php...

8.8CVSS0.00217EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2025/12/29 12:00 a.m.•43 views

CVE-2024-30855

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /src/dede/makehtmllistaction.php...

0.00217EPSS
SaveExploits1References2
CVE
CVE
•added 2025/12/29 12:00 a.m.•41 views

CVE-2024-30855

The DedeCMS content management system, specifically version v5.7 , is susceptible to a Cross-Site Request Forgery (CSRF) vulnerability. The flaw exists within the /src/dede/makehtml_list_action.php endpoint, which could allow a malicious actor to trick a user into performing unintended actions on...

8.8CVSS5.8AI score0.00217EPSS
SaveExploits1References2Affected Software1
Vulnrichment
Vulnrichment
•added 2025/12/29 12:00 a.m.•7 views

CVE-2024-30855

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /src/dede/makehtmllistaction.php...

5.8AI score0.00217EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2025/12/29 12:00 a.m.•21 views

PT-2025-53785

Name of the Vulnerable Software and Affected Versions DedeCMS version 5.7 Description The software contains a Cross-Site Request Forgery CSRF issue. The vulnerability is located in the /src/dede/makehtml list action.php endpoint. A malicious actor can potentially cause a user to perform unintende...

8.8CVSS6.7AI score0.00217EPSS
SaveExploits1References9
OSV
OSV
•added 2024/04/30 8:15 p.m.•14 views

CVE-2024-33371

Cross Site Scripting vulnerability in DedeCMS v.5.7.113 allows a remote attacker to execute arbitrary code via the typeid parameter in the makehtmllistaction.php component...

6.1CVSS6.1AI score0.0046EPSS
SaveExploits1References1
Rows per page
Query Builder