Cross Site Scripting vulnerability in DedeCMS v.5.7.113 allows a remote attacker to execute arbitrary code via the typeid parameter in the makehtml_list_action.php component.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://gitee.com/zchuanwen/cve/issues/I9HQRY | Exploit Third Party Advisory Issue Tracking |
| https://gitee.com/zchuanwen/cve/issues/I9HQRY | Exploit Third Party Advisory Issue Tracking |
Configurations
History
01 Apr 2025, 15:15
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Dedecms
Dedecms dedecms |
|
| CPE | cpe:2.3:a:dedecms:dedecms:5.7.113:*:*:*:*:*:*:* | |
| References | () https://gitee.com/zchuanwen/cve/issues/I9HQRY - Exploit, Third Party Advisory, Issue Tracking |
30 Apr 2024, 20:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-04-30 20:15
Updated : 2025-04-01 15:15
NVD link : CVE-2024-33371
Mitre link : CVE-2024-33371
JSON object : View
Products Affected
dedecms
- dedecms
CWE
No CWE.
