CVE-2023-4188

CriticalCVSS 9.1

Published: 05/08/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.78%

51th percentile - higher than 51% of all known CVEs

Summary

There is a SQL Injection vulnerability in the GitHub repository instantsoft/icms2 prior to version 2.16.1-git.

Risk Assessment

An attacker could exploit this vulnerability to execute unauthorized queries against the database, potentially leading to the exposure of sensitive data.

Recommendation

It is recommended to upgrade to version 2.16.1-git or later to mitigate this vulnerability.

Original NVD description (English source)

SQL Injection in GitHub repository instantsoft/icms2 prior to 2.16.1-git.