DedeCMS has 2 CVEs on record. 2 were published in the last 90 days. The median CVSS is 8.0 (high), with 1 rated critical.

CVEs per month

Last 12 months, by publish date

1125/111225/120126/010226/020326/030426/040526/050626/060726/070826/080926/091026/10

Exploited share: 0% vs 1% corpus
Median CVSS: 8.0
Publish → KEV: —
Last 90 days: 2 prev 0

Weakness classes

Products

DedeCMS 2

Follow DedeCMS:RSS feed Save a search →Embed badge ↗

Total CVEs

Critical

CISA KEV

Exploited

Worst active — by depth score

DedeCMS vulnerabilities

CVEs affecting DedeCMS, newest first. Open any entry for full detail, references, and exploit status.

2 CVEsRSS

CVE-2021-48016Critical· 9.8

1w ago

DedeCMS 5.8.1-beta Unauthenticated RCE via plus/flink.php

DedeCMS through 5.8.1-beta contains a PHP code injection vulnerability in ShowMsg() where the HTTP Referer header is written into a DedeTemplate string and included. Unauthenticated attackers can send a crafted Referer to /plus/flink.php…

▾ MidnightDedeCMS · DedeCMSEPSS 0.44%via CVEORG

CVE-2014-125131Medium· 6.1

1w ago

DedeCMS 5.6 / 5.7 Reflected XSS via adminDirHand in config.php

DedeCMS 5.6 and 5.7 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject script by supplying unsanitized input to the adminDirHand parameter. Attackers can send crafted GET requests to /…

▾ SunlitDedeCMS · DedeCMSEPSS 0.26%via CVEORG