High severity7.3NVD Advisory· Published Oct 20, 2023· Updated Jun 17, 2026

CVE-2023-2325

Description

Stored XSS Vulnerability in M-Files Classic Web versions before 23.10 and LTS Service Release Versions before 23.2 LTS SR4 and 23.8 LTS SR1allows attacker to execute script on users browser via stored HTML document.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

M Files Corporation"/Classic Web4 versions
cpe:2.3:a:m-files:classic_web:*:*:*:*:-:*:*:*+ 3 more
- cpe:2.3:a:m-files:classic_web:*:*:*:*:-:*:*:*range: <23.10
- cpe:2.3:a:m-files:classic_web:23.2:-:*:*:lts:*:*:*
- cpe:2.3:a:m-files:classic_web:23.8:-:*:*:lts:*:*:*
- (no CPE)range: <23.10
M Files Corporation"/LTS Service Release Versionsllm-create
Range: <23.2 LTS SR4 and <23.8 LTS SR1
M Files Corporation"/M Files Webcpe-rescue
Range: 0

Patches

Vulnerability mechanics

References

empower.m-files.com/security-advisories/CVE-2023-2325nvd
product.m-files.com/security-advisories/cve-2023-2325/nvd
www.m-files.com/about/trust-center/security-advisories/cve-2023-2325/nvd

News mentions

No linked articles in our index yet.

cvss	0.474
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000