CVE-2023-6760

5.4 mediumEPSS 0.6%

Medium (5.4) in thecosy icecms. EPSS 0.6% chance of exploitation in the next 30 days.

A vulnerability classified as critical was found in Thecosy IceCMS up to 2.0.1. This vulnerability affects unknown code. The manipulation leads to manage user sessions. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-247888.

Severity

CVSS 3.1

5.4 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 50% of CVEs (scores of 2026-10-31)
CWE: CWE-1018
Published: 2023-12-13
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

thecosy:icecms

References

http://39.106.130.187/yue/yue.html
https://vuldb.com/?ctiid.247888
https://vuldb.com/?id.247888
http://39.106.130.187/yue/yue.html
https://vuldb.com/?ctiid.247888

Check your stack JSON