DedeCMS up to and including 5.7.110 was discovered to contain a cross-site scripting (XSS) vulnerability at /dede/freelist_add.php via the title parameter.
No PoCs from references.
- https://github.com/DiliLearngent/BugReport
- https://github.com/fkie-cad/nvd-json-data-feeds