Browse CVEs

CRITICAL 9.8 CVE-2026-30643 An issue was discovered in DedeCMS 5.7.118 allowing attackers to execute code via crafted setup tag values in a module upload. Dedecms after 5.7.118 Fix from $2,3002026-04-01 HIGH 8.8 CVE-2026-29839 DedeCMS v5.7.118 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability in /sys_task_add.php. Dedecms Mitigation only Fix from $1,9502026-03-24 CRITICAL 9.8 CVE-2026-30694 An issue in DedeCMS v.5.7.118 and before allows a remote attacker to execute arbitrary code via the array_filter component Dedecms after 5.7.118 Fix from $2,3002026-03-19 HIGH 8.8 CVE-2024-30855 DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /src/dede/makehtml_list_action.php. Dedecms No fix yet Fix from $1,9502025-12-29 HIGH 8.8 CVE-2025-15004 A vulnerability was identified in DedeCMS up to 5.7.118. This impacts an unknown function of the file /freelist_main.php. The manipulation of the arg… Dedecms after 5.7.118 Fix from $1,9502025-12-22 HIGH 7.2 CVE-2025-6335EPSS 7% A vulnerability was found in DedeCMS up to 5.7.2 and classified as critical. This issue affects some unknown processing of the file /include/dedetag.… Dedecms 5.7.2+ Fix from $1,9502025-06-20 HIGH 7.2 CVE-2025-5137 A vulnerability was found in DedeCMS 5.7.117. It has been classified as critical. Affected is an unknown function of the file dede/sys_verifies.php?a… Dedecms No fix yet Fix from $1,9502025-05-25 MEDIUM 6.5 CVE-2024-57241 Dedecms 5.71sp1 and earlier is vulnerable to URL redirect. In the web application, a logic error does not judge the input GET request resulting in UR… Dedecms Mitigation only Fix from $1,6002025-02-11 MEDIUM 5.4 CVE-2024-12183 A vulnerability, which was classified as problematic, was found in DedeCMS 5.7.116. This affects the function RemoveXSS of the file /plus/carbuyactio… Dedecms 5.7.116+ Fix from $1,6002024-12-04 MEDIUM 5.4 CVE-2024-12182 A vulnerability, which was classified as problematic, has been found in DedeCMS 5.7.116. Affected by this issue is some unknown functionality of the … Dedecms 5.7.116+ Fix from $1,6002024-12-04 MEDIUM 5.4 CVE-2024-12180 A vulnerability classified as problematic has been found in DedeCMS 5.7.116. Affected is an unknown function of the file /member/article_add.php. The… Dedecms 5.7.116+ Fix from $1,6002024-12-04 MEDIUM 5.4 CVE-2024-12181 A vulnerability classified as problematic was found in DedeCMS 5.7.116. Affected by this vulnerability is an unknown functionality of the file /membe… Dedecms 5.7.116+ Fix from $1,6002024-12-04 CRITICAL 9.8 CVE-2024-11138 A vulnerability classified as problematic has been found in DedeCMS 5.7.116. This affects an unknown part of the file /dede/uploads/dede/friendlink_a… Dedecms Mitigation only Fix from $2,3002024-11-12 HIGH 8.8 CVE-2024-9076EPSS 21% A vulnerability was found in DedeCMS up to 5.7.115. It has been rated as critical. This issue affects some unknown processing of the file /dede/artic… Dedecms after 5.7.115 Fix from $1,9502024-09-22 HIGH 8.8 CVE-2024-46373 Dedecms V5.7.115 contains an arbitrary code execution via file upload vulnerability in the backend. Dedecms Mitigation only Fix from $1,9502024-09-18 MEDIUM 6.1 CVE-2024-46372 DedeCMS 5.7.115 is vulnerable to Cross Site Scripting (XSS) via the advertisement code box in the advertisement management module. Dedecms Mitigation only Fix from $1,6002024-09-18 HIGH 7.2 CVE-2024-42636 DedeCMS V5.7.115 has a command execution vulnerability via file_manage_view.php?fmdo=newfile&activepath. Dedecms Mitigation only Fix from $1,9502024-08-23 HIGH 7.2 CVE-2024-6940 A vulnerability was found in DedeCMS 5.7.114. It has been classified as critical. This affects an unknown part of the file article_template_rand.php.… Dedecms No fix yet Fix from $1,9502024-07-21 CRITICAL 9.8 CVE-2024-35510 An arbitrary file upload vulnerability in /dede/file_manage_control.php of DedeCMS v5.7.114 allows attackers to execute arbitrary code via uploading … Dedecms No fix yet Fix from $2,3002024-05-28 CRITICAL 9.8 CVE-2024-35375 There is an arbitrary file upload vulnerability on the media add .php page in the backend of the website in version 5.7.114 of DedeCMS Dedecms Mitigation only Fix from $2,3002024-05-23 MEDIUM 5.5 CVE-2024-34959 DedeCMS V5.7.113 is vulnerable to Cross Site Scripting (XSS) via sys_data_replace.php. Dedecms No fix yet Fix from $1,6002024-05-17 HIGH 7.5 CVE-2024-4790 A vulnerability classified as problematic has been found in DedeCMS 5.7.114. This affects an unknown part of the file /sys_verifies.php?action=view. … Dedecms Mitigation only Fix from $1,9502024-05-14 MEDIUM 6.5 CVE-2024-34245 An arbitrary file read vulnerability in DedeCMS v5.7.114 allows authenticated attackers to read arbitrary files by specifying any path in makehtml_js… Dedecms No fix yet Fix from $1,6002024-05-14 CRITICAL 9.1 CVE-2024-33749 DedeCMS V5.7.114 is vulnerable to deletion of any file via mail_file_manage.php. Dedecms No fix yet Fix from $2,3002024-05-06 MEDIUM 6.1 CVE-2024-33371 Cross Site Scripting vulnerability in DedeCMS v.5.7.113 allows a remote attacker to execute arbitrary code via the typeid parameter in the makehtml_l… Dedecms No fix yet Fix from $1,6002024-04-30 MEDIUM 5.3 CVE-2024-29660 Cross Site Scripting vulnerability in DedeCMS v.5.7 allows a local attacker to execute arbitrary code via a crafted payload to the stepselect_main.ph… Dedecms Mitigation only Fix from $1,6002024-04-25 CRITICAL 9.8 CVE-2024-29661 A File Upload vulnerability in DedeCMS v5.7 allows a local attacker to execute arbitrary code via a crafted payload. Dedecms Mitigation only Fix from $2,3002024-04-22 HIGH 7.5 CVE-2024-3686 A vulnerability has been found in DedeCMS 5.7.112-UTF8 and classified as problematic. Affected by this vulnerability is an unknown functionality of t… Dedecms No fix yet Fix from $1,9502024-04-12 CRITICAL 9.8 CVE-2024-3685 A vulnerability, which was classified as critical, was found in DedeCMS 5.7.112-UTF8. Affected is an unknown function of the file stepselect_main.php… Dedecms Mitigation only Fix from $2,3002024-04-12 HIGH 8.8 CVE-2024-30965 DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /src/dede/member_scores.php. Dedecms Patch available Fix from $1,9502024-04-02