CVE-2023-48858

A Cross-site scripting (XSS) vulnerability in login page php code in Armex ABO.CMS 5.9 allows remote attackers to inject arbitrary web script or HTML via the login.php? URL part.

CVSS v3.1 NVD

6.1 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.52% chance of exploitation in the next 30 days, 43rd percentile

Published

2024-01-17

Updated

2025-06-02

Proof-of-concept exploits (1)

• Shumerez/CVE-2023-488580★ · 2024-01-17

Security advisories

• https://abocms.ru/about/versions/version59

References

• CVE Record
• NVD entry