CVE WATCH / VULNERABILITY DETAIL
CVE-2014-125131
MEDIUMCVSS 6.1NVD feed
Published 20 October 2026 · tracked since 21 October 2026
Description
DedeCMS 5.6 and 5.7 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject script by supplying unsanitized input to the adminDirHand parameter. Attackers can send crafted GET requests to /include/dialog/config.php that close the generated script tag a
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog