VYPR
Medium severity5.4NVD Advisory· Published Oct 31, 2023· Updated Jun 17, 2026

CVE-2023-46378

CVE-2023-46378

Description

Stored Cross Site Scripting (XSS) vulnerability in MiniCMS 1.1.1 allows attackers to run arbitrary code via crafted string appended to /mc-admin/conf.php.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Minicms/Minicmscpe-rescue2 versions
    (expand)+ 1 more
    • (no CPE)
    • (no CPE)range: = 1.1.1

Patches

Vulnerability mechanics

News mentions

0

No linked articles in our index yet.

CVE-2023-46378 · Medium · VYPR