5 matches found
CVE-2023-30130
An issue found in CraftCMS v.3.8.1 allows a remote attacker to execute arbitrary code via a crafted script to the Section parameter...
8.8CVSS8.8AI score0.01416EPSS
SaveExploits1References2
CVE-2023-30130
An issue found in CraftCMS v.3.8.1 allows a remote attacker to execute arbitrary code via a crafted script to the Section parameter...
9AI score0.01416EPSS
SaveExploits1References2
CVE-2023-30130
Summary (CVE-2023-30130) CraftCMS v3.8.1 contains a code-injection vulnerability exploited by a crafted Script in the Section parameter. The issue arises from inadequate filtering/escaping of user-supplied data, enabling a remote attacker to execute arbitrary code. The CVSS 3.1 baseline indicates...
8.8CVSS8.8AI score0.01416EPSS
SaveExploits1References2Affected Software1
20