sromanhu/CVE-2023-41436-CSZ-CMS-Stored-XSS---Pages-Content

sromanhu/CVE-2023-41436-CSZ-CMS-Stored-XSS---Pages-Content

GitHubGitHub
GitHubgithub.com
Releases0
CSZ CMS 1.3.0 is affected by a Cross-Site Scripting (XSS) vulnerability that allows attackers to execute arbitrary code via a crafted payload to the Additional Meta Tag parameter in the Pages Content Menu.
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2023-41436↗
5.4 MEDIUM—

Cross Site Scripting vulnerability in CSZCMS v.1.3.0 allows a local attacker to execute arbitrary code via a crafted script to the Additional Meta Tag parameter in the Pages Content Menu component.