CVE-2023-40877

MediumCVSS 5.4

Published: 24/08/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.39%

30th percentile - higher than 30% of all known CVEs

Summary

DedeCMS versions up to and including 5.7.110 contain a cross-site scripting (XSS) vulnerability in /dede/freelist_edit.php via the title parameter.

Risk Assessment

Exploitation of this vulnerability may lead to session hijacking or injection of malicious code, posing a threat to data security within the organization.

Recommendation

It is recommended to update DedeCMS to the latest version to eliminate this vulnerability and review application security.

Original NVD description (English source)

DedeCMS up to and including 5.7.110 was discovered to contain a cross-site scripting (XSS) vulnerability at /dede/freelist_edit.php via the title parameter.