CVE-2023-48986

Name of the Vulnerable Software and Affected Versions CU Solutions Group (CUSG) Content Management System (CMS) versions prior to 7.75

Description A Cross Site Scripting (XSS) issue allows a remote attacker to execute arbitrary code, escalate privileges, and obtain sensitive information via a crafted script to the users.php component.

Recommendations For versions prior to 7.75, update to version 7.75 or later to resolve the issue. As a temporary workaround, consider restricting access to the users.php component until a patch is available.