CVE-2023-5811

Name of the Vulnerable Software and Affected Versions flusity CMS (affected versions not specified)

Description A problematic issue was found in the function loadPostAddForm of the file core/tools/posts.php, where the manipulation of the argument menu id leads to cross-site scripting. This issue can be exploited remotely.

Recommendations Apply a patch to fix this issue. As a temporary workaround, consider restricting access to the loadPostAddForm function in the core/tools/posts.php file until a patch is available.