CVE-2023-36210

CriticalCVSS 9.8

Published: 01/08/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

28.60%

98th percentile - higher than 98% of all known CVEs

Summary

MotoCMS Version 3.4.3 Store Category Template was discovered to contain a Server-Side Template Injection (SSTI) vulnerability via the keyword parameter.

Risk Assessment

This vulnerability may allow attackers to execute malicious code on the server, potentially leading to system compromise.

Recommendation

It is recommended to update to the latest version of MotoCMS and to review and secure all input parameters in the application.

Original NVD description (English source)

MotoCMS Version 3.4.3 Store Category Template was discovered to contain a Server-Side Template Injection (SSTI) vulnerability via the keyword parameter.