← All advisories

Medium severity5.4NVD Advisory· Published Sep 27, 2023· Updated Jun 17, 2026

CVE-2023-43857

CVE-2023-43857

Description

Dreamer CMS v4.1.3 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the component /admin/u/toIndex.

Affected products

3

Dreamer CMS/Dreamer CMSllm-fuzzy2 versions
=4.1.3+ 1 more
- (no CPE)range: =4.1.3
- (no CPE)
iteachyou/Dreamer CMS
cpe:2.3:a:iteachyou:dreamer_cms:4.1.3:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

1

gitee.com/iteachyou/dreamer_cms/issues/I834WVnvdExploitIssue Tracking

News mentions

0

No linked articles in our index yet.