CVE-2026-76783

Name of the Vulnerable Software and Affected Versions DeDeCMS version 53 1 UTF8

Description Remote attackers can perform a SQL injection by manipulating the sql argument within the '/plus/advancedsearch.php' endpoint. SQL injection is a technique where malicious SQL statements are inserted into entry fields for execution, potentially allowing unauthorized access to the database.

Recommendations Avoid using the sql parameter in the '/plus/advancedsearch.php' endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.