Medium severity5.4NVD Advisory· Published Aug 18, 2023· Updated Jun 17, 2026
CVE-2023-38911
CVE-2023-38911
Description
A Cross-Site Scripting (XSS) vulnerability in CSZ CMS 1.3.0 allows attackers to execute arbitrary code via a crafted payload to the Gallery parameter in the YouTube URL fields.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- CSZ/CMSdescription
Patches
Vulnerability mechanics
References
1- github.com/desencrypt/CVE/blob/main/CVE-2023-38911/Readme.mdnvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.