CVE-2024-46372

DedeCMS 5.7.115 is vulnerable to Cross Site Scripting (XSS) via the advertisement code box in the advertisement management module

Medium · published September 18, 2024

CVSS v3.1
6.1
EPSS
0%
Percentile
19.7
In the wild
Unconfirmed
What it is

DedeCMS 5.7.115 is vulnerable to Cross Site Scripting (XSS) via the advertisement code box in the advertisement management module.

The record
Technical detail
CVSS v3.1
6.1 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00282 · 19.7th percentile
Published
2024-09-18T00:00Z
EPSS history
Timeline
  • 18 SEP 00:00Z
    DedeCMS 5.7.115 is vulnerable to Cross Site Scripting (XSS) via the advertisement code box in the advertisement management module
    cvelistv5