CVE-2026-30643 | Critical | 9.8 | 2026-04-01 | An issue was discovered in DedeCMS 5.7.118 allowing attackers to execute code via crafted setup tag values in a module upload. |
CVE-2026-29839 | High | 8.8 | 2026-03-24 | DedeCMS v5.7.118 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability in /sys_task_add.php. |
CVE-2026-30694 | Critical | 9.8 | 2026-03-19 | An issue in DedeCMS v.5.7.118 and before allows a remote attacker to execute arbitrary code via the array_filter component |
CVE-2024-30855 | High | 8.8 | 2025-12-29 | DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /src/dede/makehtml_list_action.php. |
CVE-2025-15004 | Medium | 6.3 | 2025-12-22 | A vulnerability was identified in DedeCMS up to 5.7.118. This impacts an unknown function of the file /freelist_main.php. The manipulation of the argument orde… |
CVE-2025-6335 | Medium | 4.7 | 2025-06-20 | A vulnerability was found in DedeCMS up to 5.7.2 and classified as critical. This issue affects some unknown processing of the file /include/dedetag.class.php… |
CVE-2025-5137 | Medium | 4.7 | 2025-05-25 | A vulnerability was found in DedeCMS 5.7.117. It has been classified as critical. Affected is an unknown function of the file dede/sys_verifies.php?action=getf… |
CVE-2024-57241 | Medium | 6.5 | 2025-02-11 | Dedecms 5.71sp1 and earlier is vulnerable to URL redirect. In the web application, a logic error does not judge the input GET request resulting in URL redirect… |
CVE-2024-12183 | Low | 3.5 | 2024-12-04 | A vulnerability, which was classified as problematic, was found in DedeCMS 5.7.116. This affects the function RemoveXSS of the file /plus/carbuyaction.php of t… |
CVE-2024-12182 | Low | 3.5 | 2024-12-04 | A vulnerability, which was classified as problematic, has been found in DedeCMS 5.7.116. Affected by this issue is some unknown functionality of the file /memb… |
CVE-2024-12181 | Low | 3.5 | 2024-12-04 | A vulnerability classified as problematic was found in DedeCMS 5.7.116. Affected by this vulnerability is an unknown functionality of the file /member/uploads_… |
CVE-2024-12180 | Low | 3.5 | 2024-12-04 | A vulnerability classified as problematic has been found in DedeCMS 5.7.116. Affected is an unknown function of the file /member/article_add.php. The manipulat… |
CVE-2024-11138 | Low | 2.7 | 2024-11-12 | A vulnerability classified as problematic has been found in DedeCMS 5.7.116. This affects an unknown part of the file /dede/uploads/dede/friendlink_add.php. Th… |
CVE-2024-9076 | Medium | 4.7 | 2024-09-22 | A vulnerability was found in DedeCMS up to 5.7.115. It has been rated as critical. This issue affects some unknown processing of the file /dede/article_string_… |
CVE-2024-46373 | High | 8.8 | 2024-09-18 | Dedecms V5.7.115 contains an arbitrary code execution via file upload vulnerability in the backend. |
CVE-2024-46372 | Medium | 6.1 | 2024-09-18 | DedeCMS 5.7.115 is vulnerable to Cross Site Scripting (XSS) via the advertisement code box in the advertisement management module. |
CVE-2024-42636 | High | 7.2 | 2024-08-23 | DedeCMS V5.7.115 has a command execution vulnerability via file_manage_view.php?fmdo=newfile&activepath. |
CVE-2024-6940 | Medium | 4.7 | 2024-07-21 | A vulnerability was found in DedeCMS 5.7.114. It has been classified as critical. This affects an unknown part of the file article_template_rand.php. The manip… |
CVE-2024-35510 | Critical | 9.8 | 2024-05-28 | An arbitrary file upload vulnerability in /dede/file_manage_control.php of DedeCMS v5.7.114 allows attackers to execute arbitrary code via uploading a crafted… |
CVE-2024-35375 | Critical | 9.8 | 2024-05-23 | There is an arbitrary file upload vulnerability on the media add .php page in the backend of the website in version 5.7.114 of DedeCMS |
CVE-2024-34959 | Medium | 5.5 | 2024-05-17 | DedeCMS V5.7.113 is vulnerable to Cross Site Scripting (XSS) via sys_data_replace.php. |
CVE-2024-4790 | Medium | 4.3 | 2024-05-14 | A vulnerability classified as problematic has been found in DedeCMS 5.7.114. This affects an unknown part of the file /sys_verifies.php?action=view. The manipu… |
CVE-2024-34245 | Medium | 6.5 | 2024-05-14 | An arbitrary file read vulnerability in DedeCMS v5.7.114 allows authenticated attackers to read arbitrary files by specifying any path in makehtml_js_action.ph… |
CVE-2024-4594 | Medium | 4.3 | 2024-05-07 | A vulnerability, which was classified as problematic, was found in DedeCMS 5.7. Affected is an unknown function of the file /src/dede/sys_safe.php. The manipul… |
CVE-2024-4593 | Medium | 4.3 | 2024-05-07 | A vulnerability, which was classified as problematic, has been found in DedeCMS 5.7. This issue affects some unknown processing of the file /src/dede/sys_multi… |
CVE-2024-4592 | Medium | 4.3 | 2024-05-07 | A vulnerability classified as problematic was found in DedeCMS 5.7. This vulnerability affects unknown code of the file /src/dede/sys_group_edit.php. The manip… |
CVE-2024-4591 | Medium | 4.3 | 2024-05-07 | A vulnerability classified as problematic has been found in DedeCMS 5.7. This affects an unknown part of the file /src/dede/sys_group_add.php. The manipulation… |
CVE-2024-4590 | Medium | 4.3 | 2024-05-07 | A vulnerability was found in DedeCMS 5.7. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /src/dede/sys_info… |
CVE-2024-4589 | Medium | 4.3 | 2024-05-07 | A vulnerability was found in DedeCMS 5.7. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /src/dede… |
CVE-2024-4588 | Medium | 4.3 | 2024-05-07 | A vulnerability was found in DedeCMS 5.7. It has been classified as problematic. Affected is an unknown function of the file /src/dede/mytag_add.php. The manip… |
CVE-2024-4587 | Medium | 4.3 | 2024-05-07 | A vulnerability was found in DedeCMS 5.7 and classified as problematic. This issue affects some unknown processing of the file /src/dede/tpl.php. The manipulat… |
CVE-2024-4586 | Medium | 4.3 | 2024-05-07 | A vulnerability has been found in DedeCMS 5.7 and classified as problematic. This vulnerability affects unknown code of the file /src/dede/shops_delivery.php… |
CVE-2024-4585 | Medium | 4.3 | 2024-05-07 | A vulnerability, which was classified as problematic, was found in DedeCMS 5.7. This affects an unknown part of the file /src/dede/member_type.php. The manipul… |
CVE-2024-33749 | Critical | 9.1 | 2024-05-06 | DedeCMS V5.7.114 is vulnerable to deletion of any file via mail_file_manage.php. |
CVE-2024-33371 | Medium | 6.1 | 2024-04-30 | Cross Site Scripting vulnerability in DedeCMS v.5.7.113 allows a remote attacker to execute arbitrary code via the typeid parameter in the makehtml_list_action… |
CVE-2024-33401 | Medium | 4.4 | 2024-04-29 | Cross Site Scripting vulnerability in DedeCMS v.5.7.113 allows a remote attacker to run arbitrary code via the mnum parameter. |
CVE-2024-29660 | Medium | 5.3 | 2024-04-25 | Cross Site Scripting vulnerability in DedeCMS v.5.7 allows a local attacker to execute arbitrary code via a crafted payload to the stepselect_main.php componen… |
CVE-2024-29661 | Critical | 9.8 | 2024-04-22 | A File Upload vulnerability in DedeCMS v5.7 allows a local attacker to execute arbitrary code via a crafted payload. |
CVE-2024-3686 | Medium | 4.3 | 2024-04-12 | A vulnerability has been found in DedeCMS 5.7.112-UTF8 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file up… |
CVE-2024-3685 | Medium | 6.3 | 2024-04-12 | A vulnerability, which was classified as critical, was found in DedeCMS 5.7.112-UTF8. Affected is an unknown function of the file stepselect_main.php. The mani… |
CVE-2024-30965 | High | 8.8 | 2024-04-02 | DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /src/dede/member_scores.php. |
CVE-2024-30946 | Medium | 5.5 | 2024-04-02 | DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /src/dede/co_do.php. |
CVE-2024-3148 | Medium | 6.3 | 2024-04-02 | A vulnerability, which was classified as critical, has been found in DedeCMS 5.7.112. This issue affects some unknown processing of the file dede/makehtml_arch… |
CVE-2024-3147 | Medium | 4.3 | 2024-04-02 | A vulnerability classified as problematic was found in DedeCMS 5.7. This vulnerability affects unknown code of the file /src/dede/makehtml_map.php. The manipul… |
CVE-2024-3146 | Medium | 4.3 | 2024-04-02 | A vulnerability classified as problematic has been found in DedeCMS 5.7. This affects an unknown part of the file /src/dede/makehtml_rss_action.php. The manipu… |
CVE-2024-3145 | Medium | 4.3 | 2024-04-02 | A vulnerability was found in DedeCMS 5.7. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /src/dede/makehtml… |
CVE-2024-3144 | Medium | 4.3 | 2024-04-02 | A vulnerability was found in DedeCMS 5.7. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /src/dede… |
CVE-2024-3143 | Medium | 4.3 | 2024-04-02 | A vulnerability was found in DedeCMS 5.7. It has been classified as problematic. Affected is an unknown function of the file /src/dede/member_rank.php. The man… |
CVE-2024-29684 | Critical | 9.8 | 2024-03-26 | DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /src/dede/makehtml_homepage.php allowing a remote attacker to exec… |
CVE-2024-2823 | Medium | 4.3 | 2024-03-22 | A vulnerability has been found in DedeCMS 5.7 and classified as problematic. This vulnerability affects unknown code of the file /src/dede/mda_main.php. The ma… |
CVE-2024-2822 | Medium | 4.3 | 2024-03-22 | A vulnerability, which was classified as problematic, was found in DedeCMS 5.7. This affects an unknown part of the file /src/dede/vote_edit.php. The manipulat… |
CVE-2024-2821 | Medium | 4.3 | 2024-03-22 | A vulnerability, which was classified as problematic, has been found in DedeCMS 5.7. Affected by this issue is some unknown functionality of the file /src/dede… |
CVE-2024-2820 | Medium | 4.3 | 2024-03-22 | A vulnerability classified as problematic was found in DedeCMS 5.7. Affected by this vulnerability is an unknown functionality of the file /src/dede/baidunews… |
CVE-2024-28683 | Medium | 6.1 | 2024-03-13 | DedeCMS v5.7 was discovered to contain a cross-site scripting (XSS) vulnerability via create file. |
CVE-2024-28682 | Medium | 6.3 | 2024-03-13 | DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /dede/sys_cache_up.php. |
CVE-2024-28681 | Medium | 6.1 | 2024-03-13 | DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /dede/plus_edit.php. |
CVE-2024-28680 | Medium | 6.1 | 2024-03-13 | DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /dede/diy_add.php. |
CVE-2024-28679 | Medium | 6.1 | 2024-03-13 | DedeCMS v5.7 was discovered to contain a cross-site scripting (XSS) vulnerability via Photo Collection. |
CVE-2024-28678 | Medium | 6.3 | 2024-03-13 | DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the component /dede/article_description_main.php |
CVE-2024-28677 | Medium | 6.1 | 2024-03-13 | DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /dede/article_keywords_main.php. |
CVE-2024-28676 | Medium | 6.1 | 2024-03-13 | DedeCMS v5.7 was discovered to contain a cross-site scripting (XSS) vulnerability via /dede/article_edit.php. |
CVE-2024-28673 | High | 8.8 | 2024-03-13 | DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /dede/mychannel_edit.php. |
CVE-2024-28672 | Medium | 5.4 | 2024-03-13 | DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /dede/media_edit.php. |
CVE-2024-28671 | High | 8.8 | 2024-03-13 | DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /dede/stepselect_main.php. |
CVE-2024-28670 | Medium | 6.1 | 2024-03-13 | DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /dede/freelist_main.php. |
CVE-2024-28669 | Medium | 5.4 | 2024-03-13 | DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /dede/freelist_edit.php. |
CVE-2024-28684 | High | 8.8 | 2024-03-13 | DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the component /dede/module_main.php |
CVE-2024-28675 | High | 8.8 | 2024-03-13 | DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /dede/diy_edit.php |
CVE-2024-28668 | Medium | 6.1 | 2024-03-13 | DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the component /dede/mychannel_add.php |
CVE-2024-28667 | Medium | 6.1 | 2024-03-13 | DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the component /dede/templets_one_edit.php |
CVE-2024-28666 | Medium | 5.5 | 2024-03-13 | DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the component /dede/media_add.php |
CVE-2024-28665 | High | 8.8 | 2024-03-13 | DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the component /dede/article_add.php |
CVE-2024-28432 | High | 8.8 | 2024-03-13 | DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the component /dede/article_edit.php. |
CVE-2024-28431 | High | 8.8 | 2024-03-13 | DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the component /dede/catalog_del.php. |
CVE-2024-28430 | Medium | 6.1 | 2024-03-13 | DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the component /dede/catalog_edit.php. |
CVE-2024-28429 | Medium | 5.5 | 2024-03-13 | DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the component /dede/archives_do.php |
CVE-2023-52047 | High | 8.8 | 2024-02-28 | Dedecms v5.7.112 was discovered to contain a Cross-Site Request Forgery (CSRF) in the file manager. |
CVE-2024-22895 | High | 8.8 | 2024-01-22 | DedeCMS 5.7.112 has a File Upload vulnerability via uploads/dede/module_upload.php. |
CVE-2023-7212 | Medium | 4.7 | 2024-01-07 | A vulnerability classified as critical has been found in DeDeCMS up to 5.7.112. Affected is an unknown function of the file file_class.php of the component Bac… |
CVE-2023-49494 | Medium | 6.1 | 2023-12-11 | DedeCMS v5.7.111 was discovered to contain a reflective cross-site scripting (XSS) vulnerability via the component select_media_post_wangEditor.php. |
CVE-2023-49493 | Medium | 6.1 | 2023-12-07 | DedeCMS v5.7.111 was discovered to contain a reflective cross-site scripting (XSS) vulnerability via the v parameter at selectimages.php. |
CVE-2023-49492 | Medium | 6.1 | 2023-12-07 | DedeCMS v5.7.111 was discovered to contain a reflective cross-site scripting (XSS) vulnerability via the imgstick parameter at selectimages.php. |
CVE-2023-43275 | High | 8.8 | 2023-11-16 | Cross-Site Request Forgery (CSRF) vulnerability in DedeCMS v5.7 in 110 backend management interface via /catalog_add.php, allows attackers to create crafted we… |
CVE-2023-48068 | Medium | 5.4 | 2023-11-13 | DedeCMS v6.2 was discovered to contain a Cross-site Scripting (XSS) vulnerability via spec_add.php. |
CVE-2023-5301 | Medium | 4.7 | 2023-09-30 | A vulnerability classified as critical was found in DedeCMS 5.7.111. This vulnerability affects the function AddMyAddon of the file album_add.php. The manipula… |
CVE-2023-43226 | High | 8.8 | 2023-09-28 | An arbitrary file upload vulnerability in dede/baidunews.php in DedeCMS 5.7.111 and earlier allows attackers to execute arbitrary code via uploading a crafted… |
CVE-2023-5022 | Medium | 5.5 | 2023-09-17 | A vulnerability has been found in DedeCMS up to 5.7.100 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /inc… |
CVE-2023-40784 | Critical | 9.8 | 2023-09-12 | DedeCMS 5.7.102 has a File Upload vulnerability via uploads/dede/module_make.php. |
CVE-2023-4747 | Medium | 6.3 | 2023-09-04 | A vulnerability classified as critical was found in DedeCMS 5.7.110. This vulnerability affects unknown code of the file /uploads/tags.php. The manipulation of… |
CVE-2023-40877 | Medium | 5.4 | 2023-08-24 | DedeCMS up to and including 5.7.110 was discovered to contain a cross-site scripting (XSS) vulnerability at /dede/freelist_edit.php via the title parameter. |
CVE-2023-40876 | Medium | 5.4 | 2023-08-24 | DedeCMS up to and including 5.7.110 was discovered to contain a cross-site scripting (XSS) vulnerability at /dede/freelist_add.php via the title parameter. |
CVE-2023-40875 | Medium | 5.4 | 2023-08-24 | DedeCMS up to and including 5.7.110 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities at /dede/vote_edit.php via the votename and v… |
CVE-2023-40874 | Medium | 5.4 | 2023-08-24 | DedeCMS up to and including 5.7.110 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities at /dede/vote_add.php via the votename and vo… |
CVE-2023-36298 | High | 8.8 | 2023-08-03 | DedeCMS v5.7.109 has a File Upload vulnerability, leading to remote code execution (RCE). |
CVE-2023-34842 | Critical | 9.8 | 2023-07-31 | Remote Code Execution vulnerability in DedeCMS through 5.7.109 allows remote attackers to run arbitrary code via crafted POST request to /dede/tpl.php. |
CVE-2023-37839 | Critical | 9.8 | 2023-07-13 | An arbitrary file upload vulnerability in /dede/file_manage_control.php of DedeCMS v5.7.109 allows attackers to execute arbitrary code via uploading a crafted… |
CVE-2023-3578 | Medium | 5.5 | 2023-07-10 | A vulnerability classified as critical was found in DedeCMS 5.7.109. Affected by this vulnerability is an unknown functionality of the file co_do.php. The mani… |
CVE-2023-2928 | Medium | 6.3 | 2023-05-27 | A vulnerability was found in DedeCMS up to 5.7.106. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file up… |
CVE-2023-31757 | Medium | 5.4 | 2023-05-19 | DedeCMS up to v5.7.108 is vulnerable to XSS in sys_info.php via parameters 'edit___cfg_powerby' and 'edit___cfg_beian' |
CVE-2023-2424 | Medium | 6.3 | 2023-04-29 | A vulnerability was found in DedeCMS 5.7.106 and classified as critical. Affected by this issue is the function UpDateMemberModCache of the file uploads/dede/c… |