CVE-2023-48201 - Cross Site Scripting (XSS) vulnerability in Sunlight CMS v.8.0.1, allows remote authenticated attackers to execute arbitrary code and escalate privileges via a crafted script to the Content text editor component

Back Back to CVE browser

MEDIUM

Cross Site Scripting (XSS) vulnerability in Sunlight CMS v.8.0.1, allows remote authenticated attackers to execute arbitrary code and escalate privileges via a crafted script to the Content text editor component

Published Jan 27, 2024

5.4

MEDIUM

CVSS 3.1

EPSS 0.55%

Description

Cross Site Scripting (XSS) vulnerability in Sunlight CMS v.8.0.1, allows remote authenticated attackers to execute arbitrary code and escalate privileges via a crafted script to the Content text editor component.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-52281
Advisory
https://mechaneus.github.io/CVE-2023-48201.html
ExploitThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-52281		Advisory
https://mechaneus.github.io/CVE-2023-48201.html		ExploitThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Jan 27, 2024

Updated May 29, 2025

Reserved Nov 13, 2023

Link CVE-2023-48201

CISA Vulnrichment

Updated May 8, 2025

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2023-48201

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Jan 27, 2024

Updated May 29, 2025

Link EUVD-2023-52281

GitHub

No data