← All advisories

Medium severity5.4NVD Advisory· Published Nov 13, 2023· Updated Jun 17, 2026

CVE-2023-48068

CVE-2023-48068

Description

DedeCMS v6.2 was discovered to contain a Cross-site Scripting (XSS) vulnerability via spec_add.php.

Affected products

3

Dedecms/Dedecms3 versions
cpe:2.3:a:dedecms:dedecms:6.2:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:dedecms:dedecms:6.2:*:*:*:*:*:*:*
- (no CPE)
- (no CPE)range: =6.2

Patches

Vulnerability mechanics

References

1

github.com/CP1379767017/cms/blob/dreamcms_vul/dedevCMS/dedeCMS_XSS.mdnvdExploit

News mentions

0

No linked articles in our index yet.