Security Advisory

CVE-2023-38911

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2023-08-18 00:00:00

Last updated 2024-10-07 19:37:53

Assigner mitre

State PUBLISHED

Description

A Cross-Site Scripting (XSS) vulnerability in CSZ CMS 1.3.0 allows attackers to execute arbitrary code via a crafted payload to the Gallery parameter in the YouTube URL fields.

← Browse all CVEs View on cve.org ↗