[ CVE-2026-116253 · Published 26 Oct 2026 ]
Vulnerability in DedeCMS
CVSS 7.3
EPSS <1%No fix listed yet
[ Description ]Official description
A vulnerability was determined in DedeCMS 5.7.118. This vulnerability affects the function common.inc.php::_RunMagicQuotes of the file plus/ad_js.php of the component Advertisement Rendering. Executing a manipulation of the argument aid can lead to code injection. The attack can be executed remotely.
[ Fixes ]Fixes and patches
No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.