CVE-2023-48824

BoidCMS 2.0.1 is vulnerable to Multiple Stored Cross-Site Scripting XSS issues via the title, subtitle, footer, or keywords parameter in a page=create action...

CVE-2023-48824

creationtimestamp| type| source ---|---|--- 2023-12-30 15:01:55+00:00| seen| https://t.me/ctinow/160886...

CVE-2023-48824

BoidCMS 2.0.1 is vulnerable to multiple stored XSS via the title, subtitle, footer, or keywords parameters in a page=create action. The root cause is insufficient input filtering/escaping in BoidCMS (PHP, JSON-backed flat-file CMS). Impact is XSS in affected pages; exploitation details are availa...