CVE-2026-30643

Description

An issue was discovered in DedeCMS 5.7.118 allowing attackers to execute code via crafted setup tag values in a module upload.

CVSS Vector

References

• https://gist.github.com/0psPwn/10c43912adee9bfe2ff4fec947d4ee5a
• https://www.dedecms.com/