CVE-2023-36213

CriticalCVSS 9.8

Published: 03/08/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.09%

61th percentile - higher than 61% of all known CVEs

Summary

MotoCMS version 3.4.3 contains an SQL injection vulnerability that allows a remote attacker to gain privileges via the keyword parameter of the search function.

Risk Assessment

An attacker could exploit this vulnerability to escalate privileges, potentially leading to unauthorized access to data and systems.

Recommendation

It is recommended to update MotoCMS to the latest version to mitigate this vulnerability and review application security.

Original NVD description (English source)

SQL injection vulnerability in MotoCMS v.3.4.3 allows a remote attacker to gain privileges via the keyword parameter of the search function.