CVE-2023-46958

CriticalCVSS 9.8

Published: 02/11/2023(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.05%

60th percentile - higher than 60% of all known CVEs

An issue in lmxcms v.1.41 allows a remote attacker to execute arbitrary code via a crafted script sent to the admin.php file.

An attacker can take over the server, steal data, or install malware, leading to full system compromise.

Immediately update lmxcms to the latest available version and restrict access to admin.php to trusted IP addresses only.

Original NVD description (English source)

An issue in lmxcms v.1.41 allows a remote attacker to execute arbitrary code via a crafted script to the admin.php file.