WBCE CMS Cross-Site Scripting Vulnerability (CNVD-2023-85457)

2023-10-2400:00:00

China National Vulnerability Database

www.cnvd.org.cn

wbce cms

cross-site scripting

php

mysql

vulnerability

AI Score

6.4

Confidence

High

EPSS

0.001

Percentile

26.2%

JSON

WBCE CMS is an open source content management system (CMS) based on PHP and MySQL. WBCE CMS suffers from a cross-site scripting vulnerability that stems from the application’s lack of effective filtering and escaping of user-supplied data, which can be exploited by an attacker to execute arbitrary Web script or HTML by injecting a carefully crafted payload.