Cross Site Scripting vulnerability in DedeCMS v.5.7 allows a local attacker to execute arbitrary code via a crafted payload to the stepselect_main.php component.
https://github.com/ysl1415926/cve/blob/main/DedeCMSv5.7.md
Source: Mitre, NVD
Published: 2024-04-25
Updated: 2024-07-03
Base Score: 6.6
Vector: CVSS2#AV:L/AC:M/Au:N/C:C/I:P/A:C
Severity: Medium
Base Score: 5.3
Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L