critical9.8
CVE-2026-30643
An issue was discovered in DedeCMS 5.7.118 allowing attackers to execute code via crafted setup tag values in a module upload.
Impact
An issue was discovered in DedeCMS 5.7.118 allowing attackers to execute code via crafted setup tag values in a module upload.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dedecms | Dedecms | through 5.7.118 |