Skip to content
fr Sign in
6.9 Medium

CVE-2026-10608 A security flaw has been discovered in DedeCMS 5.7.88

Description

A security flaw has been discovered in DedeCMS 5.7.88. This affects the function RemoveXSS of the file /plus/carbuyaction.php. The manipulation of the argument postname/des results in sql injection. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks.

Affected products and versions

Product Affected versions Fixed in
DedeCMS 5.7.88 No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of DedeCMS

The 54 CVEs of DedeCMS →
CVE-2026-116253 A vulnerability was determined in DedeCMS 5.7.118 6.9 Medium CVE-2026-116063 A weakness has been identified in DedeCMS up to 5.7.118 5.1 Medium CVE-2026-94004 A vulnerability was found in DedeCMS up to 5.7.118 6.9 Medium CVE-2026-76800 A flaw has been found in DeDeCMS 3 5.3 Medium
Track this CVE