CVE-2023-41601

Published September 6th, 2023

View on NVD ↗

CVSS v3

6.1

MEDIUM

CVSS v2

N/A

Affected

PROJECT

Description

Multiple cross-site scripting (XSS) vulnerabilities in install/index.php of CSZ CMS v1.3.0 allow attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Database Username or Database Host parameters.

al3zx/csz_cms_1_3_0_xss_in_install_page

XSS in install page in CSZ CMS 1.3.0

GitHub