CVE-2023-48068: Dedecms

Medium severity, CVSS 5.4. EPSS: 0.4% chance of exploitation in the next 30 days.

DedeCMS v6.2 was discovered to contain a Cross-site Scripting (XSS) vulnerability via spec_add.php.

Affected products

• Dedecms Dedecms: version 6.2 only

Published 2023-11-13. Last modified 2026-06-17.