CVE-2021-48016 - DedeCMS 5.8.1-beta Unauthenticated RCE via plus/flink.php
CVE ID :CVE-2021-48016 Published : Oct. 22, 2026, 11:17 a.m. | 50 minutes ago Description :DedeCMS through 5.8.1-beta contains a PHP code injection vulnerability in ShowMsg() where the HTTP Referer header is written into a DedeTemplate string and included. Unauthenticated attackers can send a...