4 matches found
Cross site scripting
Reflected XSS exists in DedeCMS 5.7 SP2 via the /member/pm.php folder parameter...
4.3CVSS6AI score0.0073EPSS
SaveExploits1References2Affected Software1
CVE-2018-18579
Reflected XSS exists in DedeCMS 5.7 SP2 via the /member/pm.php folder parameter...
6.1CVSS6AI score0.0073EPSS
SaveExploits1References2
CVE-2018-18579: Improper Neutralization of Input During Web Page Generation
Reflected XSS exists in DedeCMS 5.7 SP2 via the /member/pm.php folder parameter...
6.1CVSS6.3AI score0.0073EPSS
SaveExploits1References2
PT-2018-14525
Name of the Vulnerable Software and Affected Versions DedeCMS version 5.7 SP2 Description A reflected XSS issue exists, allowing potential exploitation via the "folder" parameter in the /member/pm.php endpoint. Recommendations For DedeCMS version 5.7 SP2, update to a newer version that contains a...
6.1CVSS0.0073EPSS
SaveExploits1References4
20