CVE-2023-34842: Dedecms

Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days.

Remote Code Execution vulnerability in DedeCMS through 5.7.109 allows remote attackers to run arbitrary code via crafted POST request to /dede/tpl.php.

Affected products

• Dedecms Dedecms: up to and including 5.7.109

Published 2023-07-31. Last modified 2026-07-09.