6.9
Medium
CVE-2026-10607 A vulnerability was identified in DedeCMS 5.7.88
Description
A vulnerability was identified in DedeCMS 5.7.88. The impacted element is the function dede_htmlspecialchars of the file /plus/flink.php. The manipulation of the argument msg leads to sql injection. The attack may be initiated remotely. The exploit is publicly available and might be used.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| DedeCMS | 5.7.88 | No fix stated |
References
Timeline
- Published
- Last modified