CVE-2023-33356: XSS
Published May 25, 2023
·Updated
IceCMS v1.0.0 is vulnerable to Cross Site Scripting (XSS).
Affected Software
2 affected components
Icecms Project Icecms=1.0.0
Thecosy IceCMS=1.0.0
Event History
May 25, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·02:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the vulnerability of CVE-2023-33356?
CVE-2023-33356 is a Cross-Site Scripting (XSS) vulnerability in IceCMS v1.0.0.
2
How severe is CVE-2023-33356?
CVE-2023-33356 has a severity rating of 5.4, which is considered medium.
3
How does CVE-2023-33356 affect IceCMS?
CVE-2023-33356 allows attackers to inject malicious scripts into IceCMS, potentially leading to the theft of user information or session hijacking.
4
Is there a fix for CVE-2023-33356?
At the moment, there is no official patch or update available to fix CVE-2023-33356, but it is recommended to apply any available security updates and follow best security practices to mitigate the risk.
5
Where can I find more information about CVE-2023-33356?
You can find more information about CVE-2023-33356 in the GitHub issue tracker: https://github.com/Thecosy/IceCMS/issues/8