VYPR
o8sdm leads to cr","datePublished":"2023-07-07T16:15:09.87Z","dateModified":"2026-06-17T06:14:18.6Z","publisher":{"@type":"Organization","@id":"https://portal.vyprsec.ai#publisher","name":"VYPR","url":"https://portal.vyprsec.ai","logo":{"@type":"ImageObject","url":"https://portal.vyprsec.ai/icon.svg","width":64,"height":64},"description":"Real-time CVE intelligence newsroom — feeds, exploits, vendor advisories, and AI-synthesized insights."},"author":{"@type":"Organization","@id":"https://portal.vyprsec.ai#publisher","name":"VYPR","url":"https://portal.vyprsec.ai","logo":{"@type":"ImageObject","url":"https://portal.vyprsec.ai/icon.svg","width":64,"height":64},"description":"Real-time CVE intelligence newsroom — feeds, exploits, vendor advisories, and AI-synthesized insights."},"proficiencyLevel":"Expert","about":{"@type":"Thing","@id":"https://nvd.nist.gov/vuln/detail/CVE-2023-3541","name":"CVE-2023-3541","identifier":"CVE-2023-3541","description":"A vulnerability has been found in ThinuTech ThinuCMS 1.5 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /author_posts.php. The manipulation of the argument author with the input g6g12o8sdm leads to cross site scripting. The attack can be launched remotely. The identifier VDB-233293 was assigned to this vulnerability.","additionalType":"https://schema.org/SoftwareApplication","sameAs":["https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3541"]},"keywords":"CVE-2023-3541, Low, CWE-79, ThinuTech ThinuCMS, ThinuTech ThinuCMS, ThinuTech ThinuCMS","mentions":[{"@type":"SoftwareApplication","name":"ThinuCMS","applicationCategory":"SecurityApplication","publisher":{"@type":"Organization","name":"ThinuTech"}},{"@type":"SoftwareApplication","name":"ThinuCMS","applicationCategory":"SecurityApplication","publisher":{"@type":"Organization","name":"ThinuTech"}},{"@type":"SoftwareApplication","name":"ThinuCMS","applicationCategory":"SecurityApplication","publisher":{"@type":"Organization","name":"ThinuTech"}}],"isAccessibleForFree":true},{"@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://portal.vyprsec.ai/"},{"@type":"ListItem","position":2,"name":"CVEs","item":"https://portal.vyprsec.ai/cves"},{"@type":"ListItem","position":3,"name":"CVE-2023-3541","item":"https://portal.vyprsec.ai/cves/CVE-2023-3541"}]}]}
← All advisories
Low severity3.5NVD Advisory· Published Jul 7, 2023· Updated Jun 17, 2026

CVE-2023-3541

CVE-2023-3541

Description

A vulnerability has been found in ThinuTech ThinuCMS 1.5 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /author_posts.php. The manipulation of the argument author with the input g6g12o8sdm leads to cross site scripting. The attack can be launched remotely. The identifier VDB-233293 was assigned to this vulnerability.

Affected products

3
  • ThinuTech/ThinuCMS3 versions
    cpe:2.3:a:thinutech:thinu-cms:1.5:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:thinutech:thinu-cms:1.5:*:*:*:*:*:*:*
    • (no CPE)range: =1.5
    • (no CPE)range: 1.5

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.