CVE-2023-39650

CriticalCVSS 9.8

Published: 28/08/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

High risk

3.63%

88th percentile - higher than 88% of all known CVEs

Summary

The Volty CMS Blog theme up to version v4.0.1 was found to contain a SQL injection vulnerability via the id parameter at /tvcmsblog/single.

Risk Assessment

An attacker could exploit this vulnerability to gain unauthorized access to the database, potentially leading to the disclosure of sensitive information.

Recommendation

It is recommended to update the theme to the latest version to mitigate this vulnerability.

Original NVD description (English source)

Theme Volty CMS Blog up to version v4.0.1 was discovered to contain a SQL injection vulnerability via the id parameter at /tvcmsblog/single.