CVE-2023-39599

MediumCVSS 5.4

Published: 22/08/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.49%

38th percentile - higher than 38% of all known CVEs

Summary

The Cross-Site Scripting (XSS) vulnerability in CSZ CMS version 1.3.0 allows attackers to execute arbitrary code via a crafted payload in the Social Settings parameter.

Risk Assessment

This vulnerability could lead to account takeover and data theft, posing a significant security risk to the organization.

Recommendation

It is recommended to update CSZ CMS to the latest version to mitigate this vulnerability and implement additional security measures against XSS attacks.

Original NVD description (English source)

Cross-Site Scripting (XSS) vulnerability in CSZ CMS v.1.3.0 allows attackers to execute arbitrary code via a crafted payload to the Social Settings parameter.