4 matches found
Cross site scripting
DedeCMS 5.7 SP2 allows XSS via the plus/qrcode.php type parameter...
4.3CVSS6AI score0.0073EPSS
SaveExploits1References2Affected Software1
CVE-2018-18578
DedeCMS 5.7 SP2 allows XSS via the plus/qrcode.php type parameter...
6.1CVSS6AI score0.0073EPSS
SaveExploits1References2
CVE-2018-18578
CVE-2018-18578 affects DedeCMS 5.7 SP2. A cross-site scripting vulnerability exists in the plus/qrcode.php page via the type parameter, enabling injected script in affected contexts. Documented by multiple sources (CNVD, RH Red Hat, NVD, CVE list). Exploit details and fixes are not provided in th...
6.1CVSS5.9AI score0.0073EPSS
SaveExploits1References2Affected Software1
20