CVE-2024-12181 | DedeCMS 5.7.116 SWF File /member/uploads_add.php mediatype cross site scripting

A vulnerability classified as problematic was found in DedeCMS 5.7.116. Affected by this vulnerability is an unknown functionality of the file /member/uploads_add.php of the component SWF File Handler. The manipulation of the argument mediatype leads to cross site scripting.

This vulnerability is known as CVE-2024-12181. The attack can be launched remotely. Furthermore, there is an exploit available.