3 matches found
Cross site scripting
DedeCMS 5.7 SP2 allows XSS via the plus/qrcode.php type parameter...
4.3CVSS6AI score0.0073EPSS
SaveExploits1References2Affected Software1
CVE-2018-18578: Improper Neutralization of Input During Web Page Generation
DedeCMS 5.7 SP2 allows XSS via the plus/qrcode.php type parameter...
6.1CVSS6.3AI score0.0073EPSS
SaveExploits1References2
PT-2018-14524
Name of the Vulnerable Software and Affected Versions DedeCMS version 5.7 SP2 Description The issue allows for XSS attacks via the type parameter in the plus/qrcode.php endpoint. Recommendations For DedeCMS version 5.7 SP2, update the plus/qrcode.php file to properly sanitize the type parameter t...
6.1CVSS0.0073EPSS
SaveExploits1References4
20