CVE-2022-46442: Dedecms

Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days.

dedecms <=V5.7.102 is vulnerable to SQL Injection. In sys_ sql_ n query.php there are no restrictions on the sql query.

Affected products

• Dedecms Dedecms: up to and including 5.7.102

Published 2022-12-27. Last modified 2026-06-17.