CVE-2024-33371

April 30, 2024, 8:15 p.m.

Received
CVE has been recently published to the CVE List and has been received by the NVD.

Products

DedeCMS

  • 5.7.113

Source

cve@mitre.org

Tags

CVE-2024-33371 details

Published : April 30, 2024, 8:15 p.m.
Last Modified : April 30, 2024, 8:15 p.m.

Description

Cross Site Scripting vulnerability in DedeCMS v.5.7.113 allows a remote attacker to execute arbitrary code via the typeid parameter in the makehtml_list_action.php component.

CVSS Score

1 2 3 4 5 6 7 8 9 10

Weakness

Weakness Name Description

References

URL Source
https://gitee.com/zchuanwen/cve/issues/I9HQRY cve@mitre.org
This website uses the NVD API, but is not approved or certified by it.