CVE-2022-36583

MEDIUM

dedecms V5.7.97 - Cross-Site Scripting via dopost, rpok, and aid Parameters

Title source: llm
STIX 2.1

Description

DedeCMS V5.7.97 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities at /dede/co_do.php via the dopost, rpok, and aid parameters.

References (1)

Core 1
Core References
Exploit, Third Party Advisory x_refsource_misc
https://blog.csdn.net/weixin_45996361/article/details/125882580

Scores

CVSS v3 6.1
EPSS 0.0018
EPSS Percentile 39.2%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Details

CWE
CWE-79
Status published
Products (1)
dedecms/dedecms 5.7.97
Published Sep 01, 2022
Tracked Since Feb 18, 2026