PT-2021-10742

Name of the Vulnerable Software and Affected Versions DedeCMS version 5.7 Description The issue is related to a SQL Injection vulnerability. It can be exploited via the mdescription parameter to the "member/ajax membergroup.php" API endpoint. Recommendations For DedeCMS version 5.7, avoid using t...