CVE-2023-40877: XSS
Published Aug 24, 2023
·Updated
DedeCMS up to and including 5.7.110 was discovered to contain a cross-site scripting (XSS) vulnerability at /dede/freelistedit.php via the title parameter.
Affected Software
1 affected component
DedeCMS Dedecms<=5.7.110
Event History
Aug 24, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the vulnerability ID for this DedeCMS vulnerability?
The vulnerability ID for this DedeCMS vulnerability is CVE-2023-40877.
2
What is the severity of CVE-2023-40877?
The severity of CVE-2023-40877 is medium with a CVSS score of 5.4.
3
How does this vulnerability affect DedeCMS?
This vulnerability affects DedeCMS versions up to and including 5.7.110.
4
What is the CWE ID associated with CVE-2023-40877?
The CWE ID associated with CVE-2023-40877 is CWE-79 (Cross-site Scripting).
5
How can I fix the CVE-2023-40877 vulnerability in DedeCMS?
To fix the CVE-2023-40877 vulnerability in DedeCMS, update to a version higher than 5.7.110.