CVE-2024-30855

High · 8.8

CVSS

8.8

EPSS

0.2%

Published

Dec 29, 2025

CISA due date

—

The record

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /src/dede/makehtml_list_action.php.

Ecosystem	Package	Introduced	Fixed