high7.3
CVE-2026-94004
A vulnerability was found in DedeCMS up to 5.7.118.
Impact
A vulnerability was found in DedeCMS up to 5.7.118. The affected element is an unknown function of the file plus/mytag_js.php. The manipulation of the argument aid results in code injection. The attack can be launched remotely. The exploit has been made public and could be used.
Affected products
| Product | Affected versions |
|---|---|
| DedeCMS | before 5.7.118. |
Versions were read from the advisory text. No structured product data has been published for this record yet.