Security Advisory

CVE-2023-38910

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2023-08-18 00:00:00

Last updated 2024-10-07 19:41:01

Assigner mitre

State PUBLISHED

Description

CSZ CMS 1.3.0 is vulnerable to cross-site scripting (XSS), which allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered in the 'Carousel Wiget' section and choosing our carousel widget created above, in 'Photo URL' and 'YouTube URL' plugin.

← Browse all CVEs View on cve.org ↗