CVE-2023-40876

MediumCVSS 5.4

Published: 24/08/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.39%

30th percentile - higher than 30% of all known CVEs

Summary

DedeCMS versions up to and including 5.7.110 contain a cross-site scripting (XSS) vulnerability in /dede/freelist_add.php via the title parameter.

Risk Assessment

Exploitation of this vulnerability could lead to user session hijacking or injection of malicious code, posing a threat to application security and user data.

Recommendation

It is recommended to update DedeCMS to the latest version to eliminate this vulnerability and review application security.

Original NVD description (English source)

DedeCMS up to and including 5.7.110 was discovered to contain a cross-site scripting (XSS) vulnerability at /dede/freelist_add.php via the title parameter.