CVE-2023-49494

MEDIUMNuclei

DedeCMS v5.7.111 - Cross-Site Scripting

Title source: github.com
STIX 2.1 vulnerability

Record summary

CVE-2023-49494 has a selected CVSS score of 6.1 (medium); EIP currently links 1 Nuclei template.

Description

DedeCMS v5.7.111 was discovered to contain a reflective cross-site scripting (XSS) vulnerability via the component select_media_post_wangEditor.php.

Description source: CVE List

Exploitation context

Available material

Nuclei templates
1

Nuclei templates

1
ProjectDiscoveryMEDIUMDedeCMS v5.7.111 - Cross-Site ScriptingCVSS 6.1

DedeCMS v5.7.111 was discovered to contain a reflective cross-site scripting (XSS) vulnerability via the component select_media_post_wangEditor.php.

Impact

Successful exploitation could lead to unauthorized access or data theft.

Remediation

Apply the vendor-supplied patch or upgrade to a non-vulnerable version.

WeaknessesCWE-79
Authorsritikchaddha
Template tagscvecve2023dedecmsxssvuln
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CPE: cpe:2.3:a:dedecms:dedecms:5.7.111:*:*:*:*:*:*:*
Shodan: http.html:"DedeCms"
FOFA: app="DedeCMS"
https://github.com/Hebing123/cve/issues/3 https://nvd.nist.gov/vuln/detail/CVE-2023-49494

Source: ProjectDiscovery

References

3