DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /src/dede/co_do.php.
- https://github.com/testgo1safe/cms/blob/main/1.md
No PoCs found on GitHub currently.