critical9.0
CVE-2023-36217
Cross Site Scripting vulnerability in Xoops CMS v.2.5.10 allows a remote attacker to execute arbitrary code via the category name field of the image manager fu…
Impact
Cross Site Scripting vulnerability in Xoops CMS v.2.5.10 allows a remote attacker to execute arbitrary code via the category name field of the image manager function.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Xoops | Xoops | Version 2.5.10 |