2 matches found
CVE-2023-38911
A Cross-Site Scripting XSS vulnerability in CSZ CMS 1.3.0 allows attackers to execute arbitrary code via a crafted payload to the Gallery parameter in the YouTube URL fields...
5.4CVSS6.4AI score0.00495EPSS
SaveExploits4References4
CVE-2023-38911: Improper Neutralization of Input During Web Page Generation
A Cross-Site Scripting XSS vulnerability in CSZ CMS 1.3.0 allows attackers to execute arbitrary code via a crafted payload to the Gallery parameter in the YouTube URL fields...
5.4CVSS6.5AI score0.00495EPSS
SaveExploits4References2
20