CVE-2024-28676

Summary: CVE-2024-28676 affects DedeCMS v5.7 with a cross-site scripting (XSS) flaw exposed via the /dede/article_edit.php endpoint. The vulnerability is characterized as XSS that could impact users interacting with that API path. Several connected advisories confirm the issue but do not provide ...

CVE-2024-28683

DedeCMS v5.7 is affected by a cross-site scripting (XSS) vulnerability via the create file feature. Multiple connected sources confirm the issue in DedeCMS v5.7 (including references to SP2 in OpenVAS) and describe the root cause as an XSS exposed by file-creation tooling. Practical impact stated...

CVE-2024-28665

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via the component /dede/articleadd.php...

CVE-2024-28681

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /dede/plusedit.php...

CVE-2024-28676

DedeCMS v5.7 was discovered to contain a cross-site scripting XSS vulnerability via /dede/articleedit.php...

CVE-2024-28682

DedeCMS v5.7 is affected by a Cross-Site Request Forgery (CSRF) vulnerability that can be triggered via the /dede/sys_cache_up.php API. The Red Hat and OpenVAS-derived data confirm the CSRF issue, with components referencing DedeCMS 5.7 and the /dede/sys_cache_up.php entry point. PT Security addi...

CVE-2024-28668

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via the component /dede/mychanneladd.php...

CVE-2024-28432

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via the component /dede/articleedit.php...

CVE-2024-28675

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /dede/diyedit.php...

CVE-2024-28679

CVE-2024-28679 : DedeCMS v5.7 contains a cross-site scripting (XSS) vulnerability via the Photo Collection feature. The issue affects DedeCMS 5.7 (Photo Collection component) and is described as an XSS leading to script execution, with the CVSS base metrics indicating a Medium severity (6.1) and ...

CVE-2024-28676

DedeCMS v5.7 was discovered to contain a cross-site scripting XSS vulnerability via /dede/articleedit.php...

CVE-2024-28684

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via the component /dede/modulemain.php...

CVE-2024-28430

CVE-2024-28430 concerns DedeCMS v5.7 and a Cross‑Site Request Forgery (CSRF) flaw in the /dede/catalog_edit.php component. Public descriptions from Red Hat and OpenVAS corroborate a CSRF issue affecting DedeCMS 5.7, with multiple sources noting the vulnerability originates from that specific edit...

CVE-2024-28667

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via the component /dede/templetsoneedit.php...

CVE-2024-28680

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /dede/diyadd.php...

CVE-2024-28677

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /dede/articlekeywordsmain.php...

CVE-2024-28675

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /dede/diyedit.php...

CVE-2024-28671

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /dede/stepselectmain.php...

CVE-2024-28682

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /dede/syscacheup.php...

CVE-2024-28683

DedeCMS v5.7 was discovered to contain a cross-site scripting XSS vulnerability via create file...