Dedecms

Source repositories

https://github.com/dedecms/dedecmsarchived

CVEs (173)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2024-46372	Dedecms Dedecms	Med	0.40	6.1	0.00	Sep 18, 2024	DedeCMS 5.7.115 is vulnerable to Cross Site Scripting (XSS) via the advertisement code box in the advertisement management module.
CVE-2024-33371	Dedecms Dedecms	Med	0.40	6.1	0.00	Apr 30, 2024	Cross Site Scripting vulnerability in DedeCMS v.5.7.113 allows a remote attacker to execute arbitrary code via the typeid parameter in the makehtml_list_action.php component.
CVE-2024-28683	Dedecms Dedecms	Med	0.40	6.1	0.00	Mar 13, 2024	DedeCMS v5.7 was discovered to contain a cross-site scripting (XSS) vulnerability via create file.
CVE-2024-28681	Dedecms Dedecms	Med	0.40	6.1	0.00	Mar 13, 2024	DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /dede/plus_edit.php.
CVE-2024-28680	Dedecms Dedecms	Med	0.40	6.1	0.00	Mar 13, 2024	DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /dede/diy_add.php.
CVE-2024-28679	Dedecms Dedecms	Med	0.40	6.1	0.00	Mar 13, 2024	DedeCMS v5.7 was discovered to contain a cross-site scripting (XSS) vulnerability via Photo Collection.
CVE-2024-28677	Dedecms Dedecms	Med	0.40	6.1	0.00	Mar 13, 2024	DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /dede/article_keywords_main.php.
CVE-2024-28676	Dedecms Dedecms	Med	0.40	6.1	0.00	Mar 13, 2024	DedeCMS v5.7 was discovered to contain a cross-site scripting (XSS) vulnerability via /dede/article_edit.php.
CVE-2024-28670	Dedecms Dedecms	Med	0.40	6.1	0.00	Mar 13, 2024	DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /dede/freelist_main.php.
CVE-2024-28668	Dedecms Dedecms	Med	0.40	6.1	0.00	Mar 13, 2024	DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the component /dede/mychannel_add.php
CVE-2024-28667	Dedecms Dedecms	Med	0.40	6.1	0.00	Mar 13, 2024	DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the component /dede/templets_one_edit.php
CVE-2024-28430	Dedecms Dedecms	Med	0.40	6.1	0.00	Mar 13, 2024	DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the component /dede/catalog_edit.php.
CVE-2023-49494	Dedecms Dedecms	Med	0.40	6.1	0.01	Dec 11, 2023	DedeCMS v5.7.111 was discovered to contain a reflective cross-site scripting (XSS) vulnerability via the component select_media_post_wangEditor.php.
CVE-2023-49493	Dedecms Dedecms	Med	0.40	6.1	0.00	Dec 7, 2023	DedeCMS v5.7.111 was discovered to contain a reflective cross-site scripting (XSS) vulnerability via the v parameter at selectimages.php.
CVE-2023-49492	Dedecms Dedecms	Med	0.40	6.1	0.00	Dec 7, 2023	DedeCMS v5.7.111 was discovered to contain a reflective cross-site scripting (XSS) vulnerability via the imgstick parameter at selectimages.php.
CVE-2022-36583	Dedecms Dedecms	Med	0.40	6.1	0.01	Sep 1, 2022	DedeCMS V5.7.97 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities at /dede/co_do.php via the dopost, rpok, and aid parameters.
CVE-2020-36497	Dedecms Dedecms	Med	0.40	6.1	0.01	Oct 22, 2021	DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in the component makehtml_homepage.php via the `filename`, `mid`, `userid`, and `templet' parameters.
CVE-2020-36496	Dedecms Dedecms	Med	0.40	6.1	0.01	Oct 22, 2021	DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in the component sys_admin_user_edit.php via the `filename`, `mid`, `userid`, and `templet' parameters.
CVE-2020-36495	Dedecms Dedecms	Med	0.40	6.1	0.01	Oct 22, 2021	DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in the component file_manage_view.php via the `filename`, `mid`, `userid`, and `templet' parameters.
CVE-2020-36494	Dedecms Dedecms	Med	0.40	6.1	0.01	Oct 22, 2021	DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in the component mychannel_edit.php via the `filename`, `mid`, `userid`, and `templet' parameters.

CVE-2024-46372MedSep 18, 2024
Dedecms
Dedecms
risk 0.40cvss 6.1epss 0.00
DedeCMS 5.7.115 is vulnerable to Cross Site Scripting (XSS) via the advertisement code box in the advertisement management module.
CVE-2024-33371MedApr 30, 2024
Dedecms
Dedecms
risk 0.40cvss 6.1epss 0.00
Cross Site Scripting vulnerability in DedeCMS v.5.7.113 allows a remote attacker to execute arbitrary code via the typeid parameter in the makehtml_list_action.php component.
CVE-2024-28683MedMar 13, 2024
Dedecms
Dedecms
risk 0.40cvss 6.1epss 0.00
DedeCMS v5.7 was discovered to contain a cross-site scripting (XSS) vulnerability via create file.
CVE-2024-28681MedMar 13, 2024
Dedecms
Dedecms
risk 0.40cvss 6.1epss 0.00
DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /dede/plus_edit.php.
CVE-2024-28680MedMar 13, 2024
Dedecms
Dedecms
risk 0.40cvss 6.1epss 0.00
DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /dede/diy_add.php.
CVE-2024-28679MedMar 13, 2024
Dedecms
Dedecms
risk 0.40cvss 6.1epss 0.00
DedeCMS v5.7 was discovered to contain a cross-site scripting (XSS) vulnerability via Photo Collection.
CVE-2024-28677MedMar 13, 2024
Dedecms
Dedecms
risk 0.40cvss 6.1epss 0.00
DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /dede/article_keywords_main.php.
CVE-2024-28676MedMar 13, 2024
Dedecms
Dedecms
risk 0.40cvss 6.1epss 0.00
DedeCMS v5.7 was discovered to contain a cross-site scripting (XSS) vulnerability via /dede/article_edit.php.
CVE-2024-28670MedMar 13, 2024
Dedecms
Dedecms
risk 0.40cvss 6.1epss 0.00
DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /dede/freelist_main.php.
CVE-2024-28668MedMar 13, 2024
Dedecms
Dedecms
risk 0.40cvss 6.1epss 0.00
DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the component /dede/mychannel_add.php
CVE-2024-28667MedMar 13, 2024
Dedecms
Dedecms
risk 0.40cvss 6.1epss 0.00
DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the component /dede/templets_one_edit.php
CVE-2024-28430MedMar 13, 2024
Dedecms
Dedecms
risk 0.40cvss 6.1epss 0.00
DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the component /dede/catalog_edit.php.
CVE-2023-49494MedDec 11, 2023
Dedecms
Dedecms
risk 0.40cvss 6.1epss 0.01
DedeCMS v5.7.111 was discovered to contain a reflective cross-site scripting (XSS) vulnerability via the component select_media_post_wangEditor.php.
CVE-2023-49493MedDec 7, 2023
Dedecms
Dedecms
risk 0.40cvss 6.1epss 0.00
DedeCMS v5.7.111 was discovered to contain a reflective cross-site scripting (XSS) vulnerability via the v parameter at selectimages.php.
CVE-2023-49492MedDec 7, 2023
Dedecms
Dedecms
risk 0.40cvss 6.1epss 0.00
DedeCMS v5.7.111 was discovered to contain a reflective cross-site scripting (XSS) vulnerability via the imgstick parameter at selectimages.php.
CVE-2022-36583MedSep 1, 2022
Dedecms
Dedecms
risk 0.40cvss 6.1epss 0.01
DedeCMS V5.7.97 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities at /dede/co_do.php via the dopost, rpok, and aid parameters.
CVE-2020-36497MedOct 22, 2021
Dedecms
Dedecms
risk 0.40cvss 6.1epss 0.01
DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in the component makehtml_homepage.php via the `filename`, `mid`, `userid`, and `templet' parameters.
CVE-2020-36496MedOct 22, 2021
Dedecms
Dedecms
risk 0.40cvss 6.1epss 0.01
DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in the component sys_admin_user_edit.php via the `filename`, `mid`, `userid`, and `templet' parameters.
CVE-2020-36495MedOct 22, 2021
Dedecms
Dedecms
risk 0.40cvss 6.1epss 0.01
DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in the component file_manage_view.php via the `filename`, `mid`, `userid`, and `templet' parameters.
CVE-2020-36494MedOct 22, 2021
Dedecms
Dedecms
risk 0.40cvss 6.1epss 0.01
DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in the component mychannel_edit.php via the `filename`, `mid`, `userid`, and `templet' parameters.

Page 5 of 9