CVE-2023-31757: Dedecms

Medium severity, CVSS 5.4. EPSS: 0.4% chance of exploitation in the next 30 days.

DedeCMS up to v5.7.108 is vulnerable to XSS in sys_info.php via parameters 'edit___cfg_powerby' and 'edit___cfg_beian'

Affected products

• Dedecms Dedecms: version 5.7.108 only

Published 2023-05-19. Last modified 2026-06-17.