CVE-2023-49492

Summary

CVE-2023-49492 is a newly identified reflective cross-site scripting (XSS) vulnerability impacting DedeCMS version 5.7.111. Maliciously crafted imgstick parameter inputs passed to selectimages.php are capable of executing arbitrary scripts in the context of affected users. An attacker could exploit this weakness to steal sensitive information, install malware, or manipulate user actions on the compromised website. Web administrators are strongly advised to update DedeCMS to a patched version as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.