CVE-2023-41436

2023-09-1500:00:00

mitre

www.cve.org

cszcms

xss

vulnerability

meta tag

pages content menu

arbitrary code

5.9 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

10.0%

JSON

Cross Site Scripting vulnerability in CSZCMS v.1.3.0 allows a local attacker to execute arbitrary code via a crafted script to the Additional Meta Tag parameter in the Pages Content Menu component.

References

github.com/sromanhu/CSZ-CMS-Stored-XSS---Pages-Content/blob/main/README.md