CVE-2018-18782

Reflected XSS exists in DedeCMS 5.7 SP2 via the /member/myfriend.php ftype parameter.

Score

CVSS 3.0 6.1 Medium

Status

Modified - cve@mitre.org

Published

2018-10-29

Last modified

2024-08-05

Weaknesses

CWE-79

Affected products

• Dedecms (Dedecms)

References

• https://github.com/ky-j/dedecms/issues/10