CVE-2023-37122

CVE-2023-37122 describes a stored XSS in Bagecms v3.1.0, exploitable via the Custom Settings module. The root cause cited across sources is inadequate input filtering/escaping in that module, allowing arbitrary web script or HTML execution. Public references consistently name BageCMS 3.1.0 and no...