CVE-2023-2862

6.1 mediumEPSS 0.6%

Medium (6.1) in sscms siteserver cms. EPSS 0.6% chance of exploitation in the next 30 days.

A vulnerability, which was classified as problematic, was found in SiteServer CMS up to 7.2.1. Affected is an unknown function of the file /api/stl/actions/search. The manipulation of the argument ajaxDivId leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue. VDB-229818 is the identifier assigned to this vulnerability.

Severity

CVSS 3.1

6.1 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 46% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2023-05-24
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

sscms:siteserver_cms

References

https://gitee.com/siteserver/cms/issues/I71WJ4
https://vuldb.com/?ctiid.229818
https://vuldb.com/?id.229818
https://gitee.com/siteserver/cms/issues/I71WJ4
https://vuldb.com/?ctiid.229818

Check your stack JSON