Description (CNA)
A security flaw has been discovered in DedeCMS 5.7.88. This affects the function RemoveXSS of the file /plus/carbuyaction.php. The manipulation of the argument postname/des results in sql injection. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / DedeCMS | affected 5.7.88 |
CWE
CWE-89, CWE-74
References
- https://vuldb.com/vuln/367915
- https://vuldb.com/vuln/367915/cti
- https://vuldb.com/cve/CVE-2026-10608
- https://vuldb.com/submit/829415
ADP enrichment
No English description supplied.