CVE-2023-47350

8.8 highEPSS 0.4%

High (8.8) in swiftyedit swiftyedit. EPSS 0.4% chance of exploitation in the next 30 days.

Cross-Site Request Forgery (CSRF) vulnerability in SwiftyEdit Content Management System prior to v1.2.0, allows remote attackers to escalate privileges via the user password update functionality.

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 32% of CVEs (scores of 2026-10-31)
CWE: CWE-352
Published: 2023-11-22
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

swiftyedit:swiftyedit

References

https://github.com/SwiftyEdit/SwiftyEdit/commit/90a6f3df16cd1578b2827d7b2e073451f7ce4e47
https://mechaneus.github.io/CVE-2023-47350.html
https://github.com/SwiftyEdit/SwiftyEdit/commit/90a6f3df16cd1578b2827d7b2e073451f7ce4e47
https://mechaneus.github.io/CVE-2023-47350.html

Check your stack JSON