CVE-2023-37742

MediumCVSS 6.1

Published: 21/07/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.40%

32th percentile - higher than 32% of all known CVEs

WebBoss.io CMS before version 3.7.0.1 contains a reflected XSS vulnerability.

An attacker could exploit this vulnerability to inject malicious scripts, potentially leading to user data theft or session hijacking.

It is recommended to update WebBoss.io CMS to version 3.7.0.1 or later to mitigate this vulnerability.

Original NVD description (English source)

WebBoss.io CMS before v3.7.0.1 was discovered to contain a reflected cross-site scripting (XSS) vulnerability.