Security Advisory

CVE-2023-41601

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2023-09-06 00:00:00
Last updated 2024-09-26 20:48:10
Assigner mitre
State PUBLISHED

Description

Multiple cross-site scripting (XSS) vulnerabilities in install/index.php of CSZ CMS v1.3.0 allow attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Database Username or Database Host parameters.