CVE-2018-16785

8.8 highEPSS 1.9%

High (8.8) in dedecms dedecms. EPSS 1.9% chance of exploitation in the next 30 days.

XML injection vulnerability exists in the file of DedeCMS V5.7 SP2 version, which can be utilized by attackers to create script file to obtain webshell

Severity

CVSS 3.0

8.8 high

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.9% chance of exploitation in the next 30 days; higher than 79% of CVEs (scores of 2026-10-31)
CWE: CWE-91
Published: 2018-09-19
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

dedecms:dedecms

References

https://github.com/ky-j/dedecms/issues/4
https://github.com/ky-j/dedecms/issues/4

Check your stack JSON