CVE-2023-39097

MediumCVSS 5.4

Published: 03/08/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.29%

20th percentile - higher than 20% of all known CVEs

WebBoss.io CMS version 3.7.0.1 contains a stored cross-site scripting (XSS) vulnerability.

Exploitation of this vulnerability could lead to user data theft or session hijacking, posing a serious security risk to the application.

It is recommended to upgrade to the latest version of WebBoss.io CMS to mitigate this vulnerability.

Original NVD description (English source)

WebBoss.io CMS v3.7.0.1 contains a stored cross-site scripting (XSS) vulnerability.