CVE-2023-48068: XSS
First published: Mon Nov 13 2023(Updated: )
DedeCMS v6.2 was discovered to contain a Cross-site Scripting (XSS) vulnerability via spec_add.php.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Dedecms Dedecms | =6.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is CVE-2023-48068?
CVE-2023-48068 is a Cross-site Scripting (XSS) vulnerability found in DedeCMS v6.2 via spec_add.php.
How severe is CVE-2023-48068?
CVE-2023-48068 has a severity rating of 5.4, which is considered medium.
What software version is affected by CVE-2023-48068?
DedeCMS v6.2 is the affected software version for CVE-2023-48068.
How can the CVE-2023-48068 vulnerability be exploited?
The CVE-2023-48068 vulnerability can be exploited through spec_add.php in DedeCMS v6.2, allowing the execution of malicious scripts.
Are there any references related to CVE-2023-48068?
Yes, you can find more information about CVE-2023-48068 at the following link: https://github.com/CP1379767017/cms/blob/dreamcms_vul/dedevCMS/dedeCMS_XSS.md
- collector/mitre-cve
- collector/nvd-api
- agent/weakness
- agent/author
- agent/severity
- agent/references
- agent/type
- agent/tags
- agent/event
- agent/description
- vendor/dedecms
- canonical/dedecms dedecms
- version/dedecms dedecms/6.2