CVEs affecting projects tracked on Release Alert, from NVD & OSV.
DedeCMS 5.7.112 has a File Upload vulnerability via uploads/dede/module_upload.php.