← All advisories

Medium severity5.4NVD Advisory· Published Sep 11, 2023· Updated Jun 17, 2026

CVE-2023-40786

CVE-2023-40786

Description

HKcms v2.3.0.230709 is vulnerable to Cross Site Scripting (XSS) allowing administrator cookies to be stolen.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

HkCms/HkCms3 versions
cpe:2.3:a:hkcms:hkcms:2.3.0.230709:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:hkcms:hkcms:2.3.0.230709:*:*:*:*:*:*:*
- (no CPE)
- (no CPE)range: = 2.3.0.230709

Patches

Vulnerability mechanics

References

2

gitee.com/Hk_Cms/HkCms/issues/I7S3VCnvdExploitIssue TrackingThird Party Advisory
www.hkcms.cn/index/index/uplogs.htmlnvdRelease Notes

News mentions

0

No linked articles in our index yet.