← All advisories

Medium severity5.4NVD Advisory· Published May 19, 2023· Updated Jun 17, 2026

CVE-2023-31757

CVE-2023-31757

Description

DedeCMS up to v5.7.108 is vulnerable to XSS in sys_info.php via parameters 'edit___cfg_powerby' and 'edit___cfg_beian'

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Dedecms/Dedecms3 versions
cpe:2.3:a:dedecms:dedecms:5.7.108:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:dedecms:dedecms:5.7.108:*:*:*:*:*:*:*
- (no CPE)
- (no CPE)range: <=v5.7.108

Patches

Vulnerability mechanics

References

1

github.com/sleepyvv/vul_report/blob/main/DedeCMS/XSS.mdnvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.