DE
Product
DedeCMS
179
CVEs
0
On KEV
9.8
Max CVSS
4
New 30D
Severity mix
Critical 30High 57Medium 88Low 0
Watch
Add DedeCMS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-28681 | 6.1 | Mar 13 | DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /dede/plus_edit.php Affected: 5.7 |
| CVE-2024-28680 | 6.1 | Mar 13 | DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /dede/diy_add.php Affected: 5.7 |
| CVE-2024-28679 | 6.1 | Mar 13 | DedeCMS v5.7 was discovered to contain a cross-site scripting (XSS) vulnerability via Photo Collection Affected: 5.7 |
| CVE-2024-28677 | 6.1 | Mar 13 | DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /dede/article_keywords_main.php Affected: 5.7 |
| CVE-2024-28676 | 6.1 | Mar 13 | DedeCMS v5.7 was discovered to contain a cross-site scripting (XSS) vulnerability via /dede/article_edit.php Affected: 5.7 |
| CVE-2024-28670 | 6.1 | Mar 13 | DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /dede/freelist_main.php Affected: 5.7 |
| CVE-2024-28668 | 6.1 | Mar 13 | DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the component /dede/mychannel_add.php Affected: 5.7 |
| CVE-2024-28667 | 6.1 | Mar 13 | DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the component /dede/templets_one_edit.php Affected: 5.7 |
| CVE-2024-28430 | 6.1 | Mar 13 | DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the component /dede/catalog_edit.php Affected: 5.7 |
| CVE-2023-49494 | 6.1 | Dec 11 | DedeCMS v5.7.111 was discovered to contain a reflective cross-site scripting (XSS) vulnerability via the component select_media_post_wangEditor.php Affected: 5.7.111 |
| CVE-2023-49493 | 6.1 | Dec 7 | DedeCMS v5.7.111 was discovered to contain a reflective cross-site scripting (XSS) vulnerability via the v parameter at selectimages.php Affected: 5.7.111 |
| CVE-2023-49492 | 6.1 | Dec 7 | DedeCMS v5.7.111 was discovered to contain a reflective cross-site scripting (XSS) vulnerability via the imgstick parameter at selectimages.php Affected: 5.7.111 |
| CVE-2022-36583 | 6.1 | Sep 1 | DedeCMS V5.7.97 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities at /dede/co_do.php via the dopost, rpok, and aid parameters Affected: 5.7.97 |
| CVE-2020-36497 | 6.1 | Oct 22 | DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in the component makehtml_homepage.php via the `filename`, `mid`, `userid`, and… Affected: 7.5 |
| CVE-2020-36496 | 6.1 | Oct 22 | DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in the component sys_admin_user_edit.php via the `filename`, `mid`, `userid`, and… Affected: 7.5 |
| CVE-2020-36495 | 6.1 | Oct 22 | DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in the component file_manage_view.php via the `filename`, `mid`, `userid`, and… Affected: 7.5 |
| CVE-2020-36494 | 6.1 | Oct 22 | DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in the component mychannel_edit.php via the `filename`, `mid`, `userid`, and… Affected: 7.5 |
| CVE-2020-23046 | 6.1 | Oct 22 | DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in the component tpl.php via the `filename`, `mid`, `userid`, and `templet'… Affected: 7.5 |
| CVE-2018-18782 | 6.1 | Oct 29 | Reflected XSS exists in DedeCMS 5.7 SP2 via the /member/myfriend.php ftype parameter Affected: 5.7 |
| CVE-2018-18781 | 6.1 | Oct 29 | DedeCMS 5.7 SP2 allows XSS via the /member/uploads_select.php f or keyword parameter Affected: 5.7 |
| CVE-2018-18608 | 6.1 | Oct 23 | DedeCMS 5.7 SP2 allows XSS via the function named GetPageList defined in the include/datalistcp.class.php file that is used to display the page numbers list at the bottom of some… Affected: 5.7 |
| CVE-2018-18579 | 6.1 | Oct 22 | Reflected XSS exists in DedeCMS 5.7 SP2 via the /member/pm.php folder parameter Affected: 5.7 |
| CVE-2018-18578 | 6.1 | Oct 22 | DedeCMS 5.7 SP2 allows XSS via the plus/qrcode.php type parameter Affected: 5.7 |
| CVE-2018-16786 | 6.1 | Sep 21 | DedeCMS 5.7 SP2 allows XSS via an onhashchange attribute in the msg parameter to /plus/feedback_ajax.php Affected: 5.7 |
| CVE-2024-34959 | 5.5 | May 17 | DedeCMS V5.7.113 is vulnerable to Cross Site Scripting (XSS) via sys_data_replace.php Affected: 5.7.113 |
| CVE-2024-30946 | 5.5 | Apr 2 | DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /src/dede/co_do.php Affected: 5.7 |
| CVE-2024-28666 | 5.5 | Mar 13 | DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the component /dede/media_add.php Affected: 5.7 |
| CVE-2024-28429 | 5.5 | Mar 13 | DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the component /dede/archives_do.php Affected: 5.7 |
| CVE-2024-12183 | 5.4 | Dec 4 | DedeCMS HTTP POST Request carbuyaction.php RemoveXSS cross site scripting Affected: before 5.7.116 |
| CVE-2024-12182 | 5.4 | Dec 4 | DedeCMS soft_add.php cross site scripting Affected: before 5.7.116 |
| CVE-2024-12181 | 5.4 | Dec 4 | DedeCMS SWF File uploads_add.php cross site scripting Affected: before 5.7.116 |
| CVE-2024-12180 | 5.4 | Dec 4 | DedeCMS article_add.php cross site scripting Affected: before 5.7.116 |
| CVE-2024-28672 | 5.4 | Mar 13 | DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /dede/media_edit.php Affected: 5.7 |
| CVE-2024-28669 | 5.4 | Mar 13 | DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /dede/freelist_edit.php Affected: 5.7 |
| CVE-2023-48068 | 5.4 | Nov 13 | DedeCMS v6.2 was discovered to contain a Cross-site Scripting (XSS) vulnerability via spec_add.php Affected: 6.2 |
| CVE-2023-40877 | 5.4 | Aug 24 | DedeCMS up to and including 5.7.110 was discovered to contain a cross-site scripting (XSS) vulnerability at /dede/freelist_edit.php via the title parameter Affected: through 5.7.110 |
| CVE-2023-40876 | 5.4 | Aug 24 | DedeCMS up to and including 5.7.110 was discovered to contain a cross-site scripting (XSS) vulnerability at /dede/freelist_add.php via the title parameter Affected: through 5.7.110 |
| CVE-2023-40875 | 5.4 | Aug 24 | DedeCMS up to and including 5.7.110 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities at /dede/vote_edit.php via the votename and votenote parameters Affected: through 5.7.110 |
| CVE-2023-40874 | 5.4 | Aug 24 | DedeCMS up to and including 5.7.110 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities at /dede/vote_add.php via the votename and voteitem1 parameters Affected: through 5.7.110 |
| CVE-2023-31757 | 5.4 | May 19 | DedeCMS up to v5.7.108 is vulnerable to XSS in sys_info.php via parameters 'edit___cfg_powerby' and 'edit___cfg_beian' Affected: 5.7.108 |
| CVE-2022-48140 | 5.4 | Feb 2 | DedeCMS v5.7.97 was discovered to contain a cross-site scripting (XSS) vulnerability in the component /file_manage_view.php?fmdo=edit&filename Affected: 5.7.97 |
| CVE-2020-36493 | 5.4 | Oct 22 | DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in the component media_main.php via the `activepath`, `keyword`, `tag`,… Affected: 7.5 |
| CVE-2020-36492 | 5.4 | Oct 22 | DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in the component select_media.php via the `activepath`, `keyword`, `tag`,… Affected: 7.5 |
| CVE-2020-36491 | 5.4 | Oct 22 | DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in the component tags_main.php via the `activepath`, `keyword`, `tag`,… Affected: 7.5 |
| CVE-2020-36490 | 5.4 | Oct 22 | DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in the component file_manage_view.php via the `activepath`, `keyword`, `tag`,… Affected: 7.5 |
| CVE-2020-23044 | 5.4 | Oct 22 | DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in the component file_pic_view.php via the `activepath`, `keyword`, `tag`,… Affected: 7.5 |
| CVE-2020-16632 | 5.4 | May 15 | A XSS Vulnerability in /uploads/dede/action_search.php in DedeCMS V5.7 SP2 allows an authenticated user to execute remote arbitrary code via the keyword parameter Affected: 5.7 |
| CVE-2020-27533 | 5.4 | Oct 22 | A Cross Site Scripting (XSS) issue was discovered in the search feature of DedeCMS v.5.8 that allows malicious users to inject code into web pages, and other users will be… Affected: 5.8 |
| CVE-2024-29660 | 5.3 | Apr 25 | Cross Site Scripting vulnerability in DedeCMS v.5.7 allows a local attacker to execute arbitrary code via a crafted payload to the stepselect_main.php component Affected: 5.7 |
| CVE-2023-2059 | 5.3 | Apr 14 | A vulnerability was found in DedeCMS 5.7.87 Affected: 5.7.87 |