CVE-2023-53901

WBCE CMS 1.6.1 is affected by a cross-site scripting vulnerability that allows an attacker to upload a crafted HTML file with CSS-based keylogging to capture user keystrokes (e.g., passwords) via background image requests. Affected component is the upload/handling of HTML files; root cause is imp...