CVE-2024-0557: DedeBIZ Website Copyright Setting cross site scripting
First published: Mon Jan 15 2024(Updated: )
A vulnerability, which was classified as problematic, was found in DedeBIZ 6.3.0. This affects an unknown part of the component Website Copyright Setting. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-250725 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Credit: cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Dedecms v6 | =6.3.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2024-0557?
CVE-2024-0557 is classified as problematic due to its potential for cross-site scripting attacks.
How can I fix CVE-2024-0557?
To remediate CVE-2024-0557, it is recommended to update DedeBIZ to the latest version or apply patches that address the cross-site scripting vulnerability.
What type of vulnerability is CVE-2024-0557?
CVE-2024-0557 is a cross-site scripting (XSS) vulnerability that allows attackers to manipulate web content.
Which software version is affected by CVE-2024-0557?
CVE-2024-0557 affects DedeBIZ version 6.3.0.
Can CVE-2024-0557 be exploited remotely?
Yes, CVE-2024-0557 can be exploited remotely, making it particularly concerning for web applications.
- agent/weakness
- agent/references
- agent/first-publish-date
- agent/title
- agent/author
- agent/type
- agent/description
- agent/severity
- collector/epss-latest
- source/FIRST
- agent/epss
- agent/softwarecombine
- agent/event
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/source
- agent/tags
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/dedebiz
- canonical/dedecms v6
- version/dedecms v6/6.3.0