CVE-2023-6303

CSZCMS 1.3.0 contains an XSS in the Site Settings Page, specifically /admin/settings/, triggered by manipulating the Additional Meta Tag with the payload . The vulnerability is remotely exploitable and details have been publicly disclosed (VDB-246129). Several connected sources confirm the affect...