CVE-2023-48985

CU Solutions Group (CUSG) Content Management System (CMS) is affected in versions prior to 7.75 by a Cross Site Scripting (XSS) vulnerability. The issue occurs via a crafted script to the login.php component, enabling a remote attacker to execute arbitrary code, escalate privileges, and disclose ...

CVE-2023-48986

CVE-2023-48986 is an XSS vulnerability in CU Solutions Group (CUSG) Content Management System (CMS) prior to version 7.75. The issue affects the users.php component and can allow a remote attacker to execute arbitrary script, potentially escalate privileges and access sensitive information. Root ...

CVE-2023-48987

CVE-2023-48987 : The CU Solutions Group (CUSG) Content Management System (CMS) versions prior to 7.75 have a Blind SQL Injection in the pages.php component. A remote attacker can send a crafted script to exploit this, potentially executing arbitrary code, escalating privileges, and accessing sens...