← Back

Dedecms

dedecms

Vendor: Dedecms • 165 CVEs

CVEs (165)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2024-28676
1Dedecms
1Dedecms
Jun 17, 2026
Mar 13, 2024
N/A· v4
6.1 MEDIUM· v3
N/A· v2
DedeCMS v5.7 was discovered to contain a cross-site scripting (XSS) vulnerability via /dede/article_edit.php.
CVE-2024-28673
1Dedecms
1Dedecms
Jun 17, 2026
Mar 13, 2024
N/A· v4
8.8 HIGH· v3
N/A· v2
DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /dede/mychannel_edit.php.
CVE-2024-28672
1Dedecms
1Dedecms
Jun 17, 2026
Mar 13, 2024
N/A· v4
5.4 MEDIUM· v3
N/A· v2
DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /dede/media_edit.php.
CVE-2024-28671
1Dedecms
1Dedecms
Jun 17, 2026
Mar 13, 2024
N/A· v4
8.8 HIGH· v3
N/A· v2
DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /dede/stepselect_main.php.
CVE-2024-28670
1Dedecms
1Dedecms
Jun 17, 2026
Mar 13, 2024
N/A· v4
6.1 MEDIUM· v3
N/A· v2
DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /dede/freelist_main.php.
CVE-2024-28669
1Dedecms
1Dedecms
Jun 17, 2026
Mar 13, 2024
N/A· v4
5.4 MEDIUM· v3
N/A· v2
DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /dede/freelist_edit.php.
CVE-2024-28684
1Dedecms
1Dedecms
Jun 17, 2026
Mar 13, 2024
N/A· v4
8.8 HIGH· v3
N/A· v2
DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the component /dede/module_main.php
CVE-2024-28675
1Dedecms
1Dedecms
Jun 17, 2026
Mar 13, 2024
N/A· v4
8.8 HIGH· v3
N/A· v2
DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /dede/diy_edit.php
CVE-2024-28668
1Dedecms
1Dedecms
Jun 17, 2026
Mar 13, 2024
N/A· v4
6.1 MEDIUM· v3
N/A· v2
DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the component /dede/mychannel_add.php
CVE-2024-28667
1Dedecms
1Dedecms
Jun 17, 2026
Mar 13, 2024
N/A· v4
6.1 MEDIUM· v3
N/A· v2
DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the component /dede/templets_one_edit.php
CVE-2024-28666
1Dedecms
1Dedecms
Jun 17, 2026
Mar 13, 2024
N/A· v4
5.5 MEDIUM· v3
N/A· v2
DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the component /dede/media_add.php
CVE-2024-28665
1Dedecms
1Dedecms
Jun 17, 2026
Mar 13, 2024
N/A· v4
8.8 HIGH· v3
N/A· v2
DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the component /dede/article_add.php
CVE-2024-28432
1Dedecms
1Dedecms
Jun 17, 2026
Mar 13, 2024
N/A· v4
8.8 HIGH· v3
N/A· v2
DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the component /dede/article_edit.php.
CVE-2024-28431
1Dedecms
1Dedecms
Jun 17, 2026
Mar 13, 2024
N/A· v4
8.8 HIGH· v3
N/A· v2
DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the component /dede/catalog_del.php.
CVE-2024-28430
1Dedecms
1Dedecms
Jun 17, 2026
Mar 13, 2024
N/A· v4
6.1 MEDIUM· v3
N/A· v2
DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the component /dede/catalog_edit.php.
CVE-2024-28429
1Dedecms
1Dedecms
Jun 17, 2026
Mar 13, 2024
N/A· v4
5.5 MEDIUM· v3
N/A· v2
DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the component /dede/archives_do.php
CVE-2023-52047
1Dedecms
1Dedecms
Jun 17, 2026
Feb 28, 2024
N/A· v4
8.8 HIGH· v3
N/A· v2
Dedecms v5.7.112 was discovered to contain a Cross-Site Request Forgery (CSRF) in the file manager.
CVE-2024-22895
1Dedecms
1Dedecms
Jun 17, 2026
Jan 22, 2024
N/A· v4
8.8 HIGH· v3
N/A· v2
DedeCMS 5.7.112 has a File Upload vulnerability via uploads/dede/module_upload.php.
CVE-2023-7212
1Dedecms
1Dedecms
Jun 17, 2026
Jan 7, 2024
N/A· v4
9.8 CRITICAL· v3
5.8 MEDIUM· v2
A vulnerability classified as critical has been found in DeDeCMS up to 5.7.112. Affected is an unknown function of the file file_class.php of the component Backend. The manipulation leads to unrestricted upload. It is po...Show more
A vulnerability classified as critical has been found in DeDeCMS up to 5.7.112. Affected is an unknown function of the file file_class.php of the component Backend. The manipulation leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-249768. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.Show less
CVE-2023-49494
1Dedecms
1Dedecms
Jul 9, 2026
Dec 11, 2023
N/A· v4
6.1 MEDIUM· v3
N/A· v2
DedeCMS v5.7.111 was discovered to contain a reflective cross-site scripting (XSS) vulnerability via the component select_media_post_wangEditor.php.