Beveiligingsadvies

CVE-2026-10607

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-06-02 17:45:05
Laatst bijgewerkt 2026-06-03 14:56:26
Toegewezen door VulDB
CVSS-score 7.5
Status PUBLISHED

Beschrijving

A vulnerability was identified in DedeCMS 5.7.88. The impacted element is the function dede_htmlspecialchars of the file /plus/flink.php. The manipulation of the argument msg leads to sql injection. The attack may be initiated remotely. The exploit is publicly available and might be used.