CVE-2023-2294

CVE-2023-2294 affects UCMS 1.6.0. The vulnerability is in the file saddpost.php of the Column Configuration component, where manipulating the parameter strorder can lead to a cross-site scripting (XSS) vulnerability. The issue can be exploited remotely and has been disclosed publicly. Multiple co...