CVE-2023-4653

Name of the Vulnerable Software and Affected Versions instantsoft/icms2 versions prior to 2.16.1-git

Description The issue is related to Cross-site Scripting (XSS) - Stored. This means that an attacker can inject malicious scripts into a website, which are then stored on the server and executed by other users. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited.

Recommendations For versions prior to 2.16.1-git, update to version 2.16.1-git or later to resolve the issue. As a temporary workaround, consider restricting user input to minimize the risk of exploitation.