CVE-2026-30643 | DedeCMS 5.7.118 Module setup tag unrestricted upload

A vulnerability, which was classified as critical, has been found in DedeCMS 5.7.118. Impacted is an unknown function of the component Module Handler. This manipulation of the argument setup tag causes unrestricted upload.

This vulnerability appears as CVE-2026-30643. The attack may be initiated remotely. There is no available exploit.