DE
Product
DedeCMS
179
CVEs
0
On KEV
9.8
Max CVSS
4
New 30D
Severity mix
Critical 30High 57Medium 88Low 0
Watch
Add DedeCMS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-40875 | 5.4 | Aug 24 | DedeCMS up to and including 5.7.110 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities at /dede/vote_edit.php via the votename and votenote parameters Affected: through 5.7.110 |
| CVE-2023-40874 | 5.4 | Aug 24 | DedeCMS up to and including 5.7.110 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities at /dede/vote_add.php via the votename and voteitem1 parameters Affected: through 5.7.110 |
| CVE-2023-31757 | 5.4 | May 19 | DedeCMS up to v5.7.108 is vulnerable to XSS in sys_info.php via parameters 'edit___cfg_powerby' and 'edit___cfg_beian' Affected: 5.7.108 |
| CVE-2022-48140 | 5.4 | Feb 2 | DedeCMS v5.7.97 was discovered to contain a cross-site scripting (XSS) vulnerability in the component /file_manage_view.php?fmdo=edit&filename Affected: 5.7.97 |
| CVE-2020-36493 | 5.4 | Oct 22 | DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in the component media_main.php via the `activepath`, `keyword`, `tag`,… Affected: 7.5 |
| CVE-2020-36492 | 5.4 | Oct 22 | DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in the component select_media.php via the `activepath`, `keyword`, `tag`,… Affected: 7.5 |
| CVE-2020-36491 | 5.4 | Oct 22 | DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in the component tags_main.php via the `activepath`, `keyword`, `tag`,… Affected: 7.5 |
| CVE-2020-36490 | 5.4 | Oct 22 | DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in the component file_manage_view.php via the `activepath`, `keyword`, `tag`,… Affected: 7.5 |
| CVE-2020-23044 | 5.4 | Oct 22 | DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in the component file_pic_view.php via the `activepath`, `keyword`, `tag`,… Affected: 7.5 |
| CVE-2020-16632 | 5.4 | May 15 | A XSS Vulnerability in /uploads/dede/action_search.php in DedeCMS V5.7 SP2 allows an authenticated user to execute remote arbitrary code via the keyword parameter Affected: 5.7 |
| CVE-2020-27533 | 5.4 | Oct 22 | A Cross Site Scripting (XSS) issue was discovered in the search feature of DedeCMS v.5.8 that allows malicious users to inject code into web pages, and other users will be… Affected: 5.8 |
| CVE-2024-29660 | 5.3 | Apr 25 | Cross Site Scripting vulnerability in DedeCMS v.5.7 allows a local attacker to execute arbitrary code via a crafted payload to the stepselect_main.php component Affected: 5.7 |
| CVE-2023-2059 | 5.3 | Apr 14 | A vulnerability was found in DedeCMS 5.7.87 Affected: 5.7.87 |
| CVE-2018-6881 | 5.3 | Feb 12 | EmpireCMS 6.6 allows remote attackers to discover the full path via an array value for a parameter to admin/tool/ShowPic.php Affected: 5.7 |
| CVE-2026-19353 | 5.0 | Aug 9 | DedeCMS Installation Wizard index.php _4_Setup file inclusion Affected: 5.7.118 UTF8SP2 |
| CVE-2026-116063 New | 4.7 | Oct 25 | DedeCMS update_guide.php require_once code injection Affected: 5.7.118 |
| CVE-2026-15700 | 4.7 | Jul 14 | DedeCMS Album Publishing Feature zip.class.php ExtractFile path traversal Affected: 5.7.118 |
| CVE-2026-15533 | 4.7 | Jul 13 | DedeCMS Column Management search.php code injection Affected: 5.7.118 |
| CVE-2024-33401 | 4.4 | Apr 29 | Cross Site Scripting vulnerability in DedeCMS v.5.7.113 allows a remote attacker to run arbitrary code via the mnum parameter Affected: 5.7.113 |
| CVE-2024-4594 | 4.3 | May 7 | A vulnerability, which was classified as problematic, was found in DedeCMS 5.7 Affected: 5.7 |
| CVE-2024-4593 | 4.3 | May 7 | A vulnerability, which was classified as problematic, has been found in DedeCMS 5.7 Affected: 5.7 |
| CVE-2024-4592 | 4.3 | May 7 | A vulnerability classified as problematic was found in DedeCMS 5.7 Affected: 5.7 |
| CVE-2024-4591 | 4.3 | May 7 | A vulnerability classified as problematic has been found in DedeCMS 5.7 Affected: 5.7 |
| CVE-2024-4590 | 4.3 | May 7 | A vulnerability was found in DedeCMS 5.7 Affected: 5.7 |
| CVE-2024-4589 | 4.3 | May 7 | A vulnerability was found in DedeCMS 5.7 Affected: 5.7 |
| CVE-2024-4588 | 4.3 | May 7 | A vulnerability was found in DedeCMS 5.7 Affected: 5.7 |
| CVE-2024-4587 | 4.3 | May 7 | A vulnerability was found in DedeCMS 5.7 and classified as problematic Affected: 5.7 |
| CVE-2024-4586 | 4.3 | May 7 | A vulnerability has been found in DedeCMS 5.7 and classified as problematic Affected: 5.7 |
| CVE-2024-4585 | 4.3 | May 7 | A vulnerability, which was classified as problematic, was found in DedeCMS 5.7 Affected: 5.7 |
| CVE-2024-3147 | 4.3 | Apr 2 | A vulnerability classified as problematic was found in DedeCMS 5.7 Affected: 5.7 |
| CVE-2024-3146 | 4.3 | Apr 2 | A vulnerability classified as problematic has been found in DedeCMS 5.7 Affected: 5.7 |
| CVE-2024-3145 | 4.3 | Apr 2 | A vulnerability was found in DedeCMS 5.7 Affected: 5.7 |
| CVE-2024-3144 | 4.3 | Apr 2 | A vulnerability was found in DedeCMS 5.7 Affected: 5.7 |
| CVE-2024-3143 | 4.3 | Apr 2 | A vulnerability was found in DedeCMS 5.7 Affected: 5.7 |
| CVE-2024-2823 | 4.3 | Mar 22 | A vulnerability has been found in DedeCMS 5.7 and classified as problematic Affected: 5.7 |
| CVE-2024-2822 | 4.3 | Mar 22 | A vulnerability, which was classified as problematic, was found in DedeCMS 5.7 Affected: 5.7 |
| CVE-2024-2821 | 4.3 | Mar 22 | A vulnerability, which was classified as problematic, has been found in DedeCMS 5.7 Affected: 5.7 |
| CVE-2024-2820 | 4.3 | Mar 22 | A vulnerability classified as problematic was found in DedeCMS 5.7 Affected: 5.7 |