CVE-2024-29660: Dedecms

Medium severity, CVSS 5.3. EPSS: 0.2% chance of exploitation in the next 30 days.

Cross Site Scripting vulnerability in DedeCMS v.5.7 allows a local attacker to execute arbitrary code via a crafted payload to the stepselect_main.php component.

Affected products

• Dedecms Dedecms: version 5.7 only

Published 2024-04-25. Last modified 2026-06-17.