Vulnerabilities > Dedecms > Medium

DATE CVE VULNERABILITY TITLE RISK
2024-12-04 CVE-2024-12182 Cross-site Scripting vulnerability in Dedecms
A vulnerability, which was classified as problematic, has been found in DedeCMS 5.7.116.
network
low complexity
dedecms CWE-79
5.4
2024-12-04 CVE-2024-12183 Cross-site Scripting vulnerability in Dedecms
A vulnerability, which was classified as problematic, was found in DedeCMS 5.7.116.
network
low complexity
dedecms CWE-79
5.4
2024-12-04 CVE-2024-12180 Cross-site Scripting vulnerability in Dedecms
A vulnerability classified as problematic has been found in DedeCMS 5.7.116.
network
low complexity
dedecms CWE-79
5.4
2024-12-04 CVE-2024-12181 Cross-site Scripting vulnerability in Dedecms
A vulnerability classified as problematic was found in DedeCMS 5.7.116.
network
low complexity
dedecms CWE-79
5.4
2024-09-18 CVE-2024-46372 Cross-site Scripting vulnerability in Dedecms 5.7.115
DedeCMS 5.7.115 is vulnerable to Cross Site Scripting (XSS) via the advertisement code box in the advertisement management module.
network
low complexity
dedecms CWE-79
6.1
2023-12-11 CVE-2023-49494 Cross-site Scripting vulnerability in Dedecms 5.7.111
DedeCMS v5.7.111 was discovered to contain a reflective cross-site scripting (XSS) vulnerability via the component select_media_post_wangEditor.php.
network
low complexity
dedecms CWE-79
6.1
2023-12-07 CVE-2023-49492 Cross-site Scripting vulnerability in Dedecms 5.7.111
DedeCMS v5.7.111 was discovered to contain a reflective cross-site scripting (XSS) vulnerability via the imgstick parameter at selectimages.php.
network
low complexity
dedecms CWE-79
6.1
2023-12-07 CVE-2023-49493 Cross-site Scripting vulnerability in Dedecms 5.7.111
DedeCMS v5.7.111 was discovered to contain a reflective cross-site scripting (XSS) vulnerability via the v parameter at selectimages.php.
network
low complexity
dedecms CWE-79
6.1
2023-11-13 CVE-2023-48068 Cross-site Scripting vulnerability in Dedecms 6.2
DedeCMS v6.2 was discovered to contain a Cross-site Scripting (XSS) vulnerability via spec_add.php.
network
low complexity
dedecms CWE-79
5.4
2023-08-24 CVE-2023-40874 Cross-site Scripting vulnerability in Dedecms
DedeCMS up to and including 5.7.110 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities at /dede/vote_add.php via the votename and voteitem1 parameters.
network
low complexity
dedecms CWE-79
5.4