CVE-2023-48824

BoidCMS 2.0.1 is vulnerable to Multiple Stored Cross-Site Scripting XSS issues via the title, subtitle, footer, or keywords parameter in a page=create action...

CVE-2023-48824

BoidCMS 2.0.1 is vulnerable to multiple stored XSS via the title, subtitle, footer, or keywords parameters in a page=create action. The root cause is insufficient input filtering/escaping in BoidCMS (PHP, JSON-backed flat-file CMS). Impact is XSS in affected pages; exploitation details are availa...