CVE-2023-46505

6.1 mediumEPSS 0.4%

Medium (6.1) in pwncyn fancms. EPSS 0.4% chance of exploitation in the next 30 days.

Cross Site Scripting vulnerability in FanCMS v.1.0.0 allows an attacker to execute arbitrary code via the content1 parameter in the demo.php file.

Severity

6.1 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 35% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2023-10-27
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19