CVE-2023-28873

5.4 mediumEPSS 0.4%

Medium (5.4) in seafile seafile. EPSS 0.4% chance of exploitation in the next 30 days.

An XSS issue in wiki and discussion pages in Seafile 9.0.6 allows attackers to inject JavaScript into the Markdown editor.

Severity

5.4 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 38% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2023-12-09
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19