7 matches found
CVE-2023-49493
DedeCMS v5.7.111 was discovered to contain a reflective cross-site scripting XSS vulnerability via the v parameter at selectimages.php...
CVE-2023-49494
Summary: CVE-2023-49494 affects DedeCMS v5.7.111 and is a reflective XSS vulnerability exposed through the component select_media_post_wangEditor.php . The root cause is a reflective XSS vector in that specific page/component, enabling an attacker to inject script when a user visits a crafted URL...
CVE-2023-49492
DedeCMS v5.7.111 was discovered to contain a reflective cross-site scripting XSS vulnerability via the imgstick parameter at selectimages.php...
CVE-2023-49492
CVE-2023-49492 affects DedeCMS v5.7.111 with a reflective XSS vulnerability exploitable via the imgstick parameter on selectimages.php. Root cause: improper input handling in the imgstick parameter leading to script injection. Impact as stated: cross-site scripting risk; no exploit details provid...
CVE-2023-49493
DedeCMS v5.7.111 is affected by a reflective cross-site scripting (XSS) vulnerability in selectimages.php via the v parameter. CVSSv3.1 base score 6.1 (MEDIUM). Exploitation details and patches are not provided in the connected documents; no remediation/version fixes are stated.
CVE-2023-49492
DedeCMS v5.7.111 was discovered to contain a reflective cross-site scripting XSS vulnerability via the imgstick parameter at selectimages.php...
CVE-2023-49492
DedeCMS v5.7.111 was discovered to contain a reflective cross-site scripting XSS vulnerability via the imgstick parameter at selectimages.php...