DE
Product
DedeCMS
by · last CVE Jun 20, 2025
41
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 6High 11Medium 24Low 0
Watch

Add DedeCMS to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-9076
8.8
21%
Sep 22
DedeCMS article_string_mix.php os command injection
Affected: 5.7.115
CVE-2024-3148
8.8
1%
Apr 2
DedeCMS makehtml_archives_action.php sql injection
Affected: 5.7.112
CVE-2023-5301
8.8
7%
Sep 30
DedeCMS album_add.php AddMyAddon os command injection
Affected: 5.7.111
CVE-2023-5022
8.8
1%
Sep 17
DedeCMS select_templets_post.php absolute path traversal
Affected: 5.0; 5.1; 5.2; 5.3; 5.4; 5.5; +2 more
CVE-2023-2928
8.8
51%
May 27
DedeCMS article_allowurl_edit.php code injection
Affected: 5.7.106
CVE-2023-2424
8.8
1%
Apr 29
DedeCMS config.php UpDateMemberModCache unrestricted upload
Affected: 5.7.106
CVE-2024-4790
7.5
1%
May 11
DedeCMS path traversal
Affected: 5.7.114
CVE-2024-3686
7.5
1%
Apr 12
DedeCMS update_guide.php path traversal
Affected: 5.7.112-UTF8
CVE-2025-6335
7.2
7%
Jun 20
DedeCMS Template dedetag.class.php command injection
Affected: 5.7.0; 5.7.1; 5.7.2
CVE-2025-5137
7.2
1%
May 25
DedeCMS Incomplete Fix CVE-2018-9175 sys_verifies.php code injection
Affected: 5.7.117
CVE-2024-6940
7.2
1%
Jul 21
DedeCMS article_template_rand.php code injection
Affected: 5.7.114
Showing 11