CVE-2022-36583: Dedecms

Medium severity, CVSS 6.1. EPSS: 0.6% chance of exploitation in the next 30 days.

DedeCMS V5.7.97 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities at /dede/co_do.php via the dopost, rpok, and aid parameters.

Affected products

• Dedecms Dedecms: version 5.7.97 only

Published 2022-09-01. Last modified 2026-06-17.