{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/dedecms-5.7.118/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:dedecms:dedecms:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":7.3,"id":"CVE-2026-116253"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["DedeCMS (5.7.118)"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["DedeCMS"],"content_html":"\u003cp\u003eA vulnerability exists in DedeCMS 5.7.118 within the \u003ccode\u003ecommon.inc.php::_RunMagicQuotes\u003c/code\u003e function of the \u003ccode\u003eplus/ad_js.php\u003c/code\u003e file. The flaw affects the Advertisement Rendering component. Manipulating the \u003ccode\u003eaid\u003c/code\u003e argument can lead to code injection. The attack can be executed remotely.\u003c/p\u003e\n","date_modified":"2026-10-29T21:23:46Z","date_published":"2026-10-29T21:23:46Z","id":"https://feed.craftedsignal.io/briefs/2026-10-dedecms-code-injection-eff398ce/","summary":"A code injection vulnerability in DedeCMS 5.7.118 allows for remote exploitation via the aid parameter in the Advertisement Rendering component.","title":"DedeCMS: Code injection via Advertisement Rendering (CVE-2026-116253)","url":"https://feed.craftedsignal.io/briefs/2026-10-dedecms-code-injection-eff398ce/"}],"language":"en","title":"CraftedSignal Threat Feed - DedeCMS (5.7.118)","version":"https://jsonfeed.org/version/1.1"}