PT-2026-123243

CVE-2026-116253

·

Published

2026-10-26

·

Updated

2026-10-26

Description by

CVSS 3.1
7.3
High
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
A vulnerability was determined in DedeCMS 5.7.118. This vulnerability affects the function common.inc.php:: RunMagicQuotes of the file plus/ad js.php of the component Advertisement Rendering. Executing a manipulation of the argument aid can lead to code injection. The attack can be executed remotely.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component (\'Injection\')
CWE-94: Improper Control of Generation of Code (\'Code Injection\')
Related identifiers
CVE-2026-116253
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com