CVE-2023-47324

MediumCVSS 5.4

Published: 13/12/2023(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.48%

38th percentile - higher than 38% of all known CVEs

Summary

Silverpeas Core 6.3.1 is vulnerable to Cross Site Scripting (XSS) via the message/notification feature. An attacker can inject malicious JavaScript code into message content.

Risk Assessment

This vulnerability could allow an attacker to steal user sessions, intercept data, or spread malware within the organization.

Recommendation

It is recommended to immediately update Silverpeas Core to the latest version that includes a fix for the XSS vulnerability.

Original NVD description (English source)

Silverpeas Core 6.3.1 is vulnerable to Cross Site Scripting (XSS) via the message/notification feature.