2023-09-09

2023-09-10

2023-09-11

All (3) Critical (4) High (5) Medium (3)

CVE-2023-4870 MEDIUM POC This Month

A vulnerability classified as problematic has been found in SourceCodester Contact Manager App 1.0. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Contact Manager App

NVD VulDB

CVSS 3.1

6.1

EPSS

0.6%

CVE-2023-4878 MEDIUM POC PATCH This Month

Server-Side Request Forgery (SSRF) in GitHub repository instantsoft/icms2 prior to 2.16.1-git. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

SSRF Instantcms

NVD GitHub

CVSS 3.1

5.4

EPSS

0.3%

CVE-2023-4879 MEDIUM POC PATCH This Month

Cross-site Scripting (XSS) - Stored in GitHub repository instantsoft/icms2 prior to 2.16.1.-git. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

XSS Instantcms

NVD GitHub

CVSS 3.1

4.8

EPSS

0.3%