CVE-2023-4187

MediumCVSS 4.8

Published: 05/08/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.41%

32th percentile - higher than 32% of all known CVEs

Summary

A Cross-site Scripting (XSS) vulnerability exists in the GitHub repository instantsoft/icms2 prior to version 2.16.1-git, allowing attackers to inject malicious code into the application.

Risk Assessment

This vulnerability may lead to user data theft and session hijacking, posing a significant security risk to the application and its users.

Recommendation

It is recommended to upgrade to version 2.16.1-git or later to mitigate this vulnerability.

Original NVD description (English source)

Cross-site Scripting (XSS) - Stored in GitHub repository instantsoft/icms2 prior to 2.16.1-git.