NA

CVE-2023-37164

Published: 20/07/2023 Updated: 31/07/2023
CVSS v3 Base Score: 6.1 | Impact Score: 2.7 | Exploitability Score: 2.8
VMScore: 0

Vulnerability Summary

Diafan CMS v6.0 exists to contain a reflected cross-site scripting via the cat_id parameter at /shop/?module=shop&action=search.

Vulnerable Product Search on Vulmon Subscribe to Product

diafan diafan.cms 6.0