Vulnerabilities > Dedecms > Dedecms > 5.7.88

DATE CVE VULNERABILITY TITLE RISK
2024-12-04 CVE-2024-12182 Cross-site Scripting vulnerability in Dedecms
A vulnerability, which was classified as problematic, has been found in DedeCMS 5.7.116.
network
low complexity
dedecms CWE-79
5.4
2024-12-04 CVE-2024-12183 Cross-site Scripting vulnerability in Dedecms
A vulnerability, which was classified as problematic, was found in DedeCMS 5.7.116.
network
low complexity
dedecms CWE-79
5.4
2024-12-04 CVE-2024-12180 Cross-site Scripting vulnerability in Dedecms
A vulnerability classified as problematic has been found in DedeCMS 5.7.116.
network
low complexity
dedecms CWE-79
5.4
2024-12-04 CVE-2024-12181 Cross-site Scripting vulnerability in Dedecms
A vulnerability classified as problematic was found in DedeCMS 5.7.116.
network
low complexity
dedecms CWE-79
5.4
2024-09-22 CVE-2024-9076 Command Injection vulnerability in Dedecms
A vulnerability was found in DedeCMS up to 5.7.115.
network
low complexity
dedecms CWE-77
8.8
2024-01-07 CVE-2023-7212 Unspecified vulnerability in Dedecms
A vulnerability classified as critical has been found in DeDeCMS up to 5.7.112.
network
low complexity
dedecms
critical
9.8
2023-09-28 CVE-2023-43226 Unrestricted Upload of File with Dangerous Type vulnerability in Dedecms
An arbitrary file upload vulnerability in dede/baidunews.php in DedeCMS 5.7.111 and earlier allows attackers to execute arbitrary code via uploading a crafted PHP file.
network
low complexity
dedecms CWE-434
8.8
2023-09-17 CVE-2023-5022 Unspecified vulnerability in Dedecms
A vulnerability has been found in DedeCMS up to 5.7.100 and classified as critical.
network
low complexity
dedecms
8.8
2023-08-24 CVE-2023-40874 Cross-site Scripting vulnerability in Dedecms
DedeCMS up to and including 5.7.110 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities at /dede/vote_add.php via the votename and voteitem1 parameters.
network
low complexity
dedecms CWE-79
5.4
2023-08-24 CVE-2023-40875 Cross-site Scripting vulnerability in Dedecms
DedeCMS up to and including 5.7.110 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities at /dede/vote_edit.php via the votename and votenote parameters.
network
low complexity
dedecms CWE-79
5.4