Description
An issue was discovered in DedeCMS 5.7.118 allowing attackers to execute code via crafted setup tag values in a module upload.
Critical · 9.8
CVE-2026-30643
EUVD-2026-17960GHSA-vc3q-w6jg-xcpj
An issue was discovered in DedeCMS 5.7.118 allowing attackers to execute code via crafted setup tag values in a module upload.
Published Apr 1, 2026 · Updated Apr 1, 2026 · Assigned by mitre