ysl1415926/Learn

Releases0

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2024-29660 ↗	Apr 25, 2024Thursday, 25 April 2024, 17:15	5.3 MEDIUM	—
Cross Site Scripting vulnerability in DedeCMS v.5.7 allows a local attacker to execute arbitrary code via a crafted payload to the stepselect_main.php component.
CVE-2024-31574 ↗	Apr 25, 2024Thursday, 25 April 2024, 17:15	5 MEDIUM	—
Cross Site Scripting vulnerability in TWCMS v.2.6 allows a local attacker to execute arbitrary code via a crafted script
CVE-2024-29661 ↗	Apr 22, 2024Monday, 22 April 2024, 12:15	9.8 CRITICAL	—
A File Upload vulnerability in DedeCMS v5.7 allows a local attacker to execute arbitrary code via a crafted payload.