← All advisories

Medium severity5.4NVD Advisory· Published Sep 28, 2023· Updated Jun 17, 2026

CVE-2023-43871

CVE-2023-43871

Description

A File upload vulnerability in WBCE v.1.6.1 allows a local attacker to upload a pdf file with hidden Cross Site Scripting (XSS).

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Wbce/Wbce CMS3 versions
cpe:2.3:a:wbce:wbce_cms:1.6.1:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:wbce:wbce_cms:1.6.1:*:*:*:*:*:*:*
- (no CPE)
- (no CPE)range: =1.6.1

Patches

Vulnerability mechanics

References

2

github.com/sromanhu/CVE-2023-43871-WBCE-Arbitrary-File-Upload--XSS---Media/blob/main/README.mdnvdExploitThird Party Advisory
github.com/sromanhu/WBCE-File-Upload--XSS---Media/blob/main/README.mdnvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.