DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /src/dede/makehtml_list_action.php.

Published Dec 29, 2025 · Updated Dec 31, 2025 · Assigned by mitre