[ Vendor · 2 CVEs ]
DedeCMS
CVEs affecting DedeCMS published in the last 30 days, plus any DedeCMS CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2021-48016 | 22 Oct 2026 | CVSS 9.8 | DedeCMSDedeCMS through 5.8.1-beta contains a PHP code injection vulnerability in ShowMsg() where the HTTP Referer header is written into a DedeTemplate… | |
| CVE-2014-125131 | 20 Oct 2026 | CVSS 6.1 | DedeCMSDedeCMS 5.6 and 5.7 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject script by supplying… |