PT-2023-30064 · Fancms · Fancms

CVE-2023-46505

Published

2023-10-27

Updated

2023-11-03

CVSS v3.1

6.1

Medium

Vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions FanCMS version 1.0.0

Description A Cross Site Scripting issue allows an attacker to execute arbitrary code via the content1 parameter in the "demo.php" file.

Recommendations For FanCMS version 1.0.0, avoid using the content1 parameter in the demo.php file until the issue is resolved.

Exploit

Fix

XSS

Found an issue in the description? Have something to add? Feel free to write us 👾

CVE-2023-46505

Fancms