CVE-2023-46054

Name of the Vulnerable Software and Affected Versions WBCE CMS versions 1.6.1 and earlier

Description A Cross Site Scripting (XSS) issue allows a remote attacker to escalate privileges via a crafted script to the website footer parameter in the "admin/settings/save.php" component.

Recommendations For WBCE CMS versions 1.6.1 and earlier, as a temporary workaround, consider restricting access to the admin/settings/save.php component until a patch is available. Avoid using the website footer parameter in the affected component until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.