CVE Catalog

CVE-2023-33356

MediumCVSS 5.4
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.38%

29th percentile - higher than 29% of all known CVEs

Summary

IceCMS version 1.0.0 is vulnerable to Cross Site Scripting (XSS) attacks, which may allow attackers to inject malicious code into the application.

Risk Assessment

Exploitation of this vulnerability could lead to user data theft and session hijacking, posing a serious threat to application security.

Recommendation

It is recommended to update IceCMS to the latest version to mitigate this vulnerability and implement appropriate protections against XSS attacks.

Original NVD description (English source)

IceCMS v1.0.0 is vulnerable to Cross Site Scripting (XSS).

Vulnerability data from NVD (NIST) · CISA KEV · EPSS