Threats tagged 'ghsa-qg5x-jc32-6g34'

A file inclusion vulnerability exists in DedeCMS up to version 5.7.118 UTF8SP2 in the Installation Wizard component's install/index.php file, specifically in the _4_Setup function. This vulnerability can be exploited remotely but requires high complexity and is difficult to exploit. The vulnerability has a CVSS score of 5.0, indicating low severity. No patch or remediation information is currently available, and no known exploits are reported in the wild.