Description
A Cross-Site Scripting (XSS) vulnerability in CSZ CMS 1.3.0 allows attackers to execute arbitrary code via a crafted payload to the Gallery parameter in the YouTube URL fields.
Unscored
CVE-2023-38911
EUVD-2023-42671GHSA-7frh-48wc-2fg4
A Cross-Site Scripting (XSS) vulnerability in CSZ CMS 1.3.0 allows attackers to execute arbitrary code via a crafted payload to the Gallery…
Published Aug 18, 2023 · Updated Oct 7, 2024 · Assigned by mitre