Vulnerabilities > Bagesoft > Medium

DATE CVE VULNERABILITY TITLE RISK
2023-07-06 CVE-2023-37122 Cross-site Scripting vulnerability in Bagesoft Bagecms 3.1.0
A stored cross-site scripting (XSS) vulnerability in Bagecms v3.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Custom Settings module.
network
low complexity
bagesoft CWE-79
5.4