Security Advisory
CVE-2023-38910
6.1
MEDIUM
Vulnerability Description
CSZ CMS 1.3.0 is vulnerable to cross-site scripting (XSS), which allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered in the 'Carousel Wiget' section and choosing our carousel widget created above, in 'Photo URL' and 'YouTube URL' plugin.
Published Date
August 18, 2023
Official Source
NIST NVD Advisory