CVE-2023-4653
MediumCVSS 4.8Exploitation Probability (EPSS)
Low risk34th percentile - higher than 34% of all known CVEs
Summary
A Cross-site Scripting (XSS) vulnerability exists in the GitHub repository instantsoft/icms2 prior to version 2.16.1-git, allowing for the storage of malicious code.
Risk Assessment
An attacker could exploit this vulnerability to inject malicious scripts, potentially leading to user data theft or session hijacking.
Recommendation
It is recommended to upgrade to version 2.16.1-git or later to mitigate this vulnerability.
Other vulnerabilities in GitHub repository instantsoft/icms2
See all- CVE-2023-4652Medium
A Cross-site Scripting (XSS) vulnerability exists in the GitHub repository instantsoft/icms2 prior to version 2.16.1-git, allowing for the storage of malicious code.
- CVE-2023-4650Medium
Improper access control exists in the GitHub repository instantsoft/icms2 prior to version 2.16.1-git.
- CVE-2023-4381Medium
In the GitHub repository instantsoft/icms2 prior to version 2.16.1-git, there is an unverified password change, which may lead to unauthorized access.
Original NVD description (English source)
Cross-site Scripting (XSS) - Stored in GitHub repository instantsoft/icms2 prior to 2.16.1-git.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS