VULNERABILITY INTELLIGENCE

CVE-2023-33196

CVSS score5.5 MEDIUM

EPSS probability0.65%

CISA KEVNot currently listed

Published2023-05-26

Last modified2026-06-17

Description

Craft is a CMS for creating custom digital experiences. Cross site scripting (XSS) can be triggered by review volumes. This issue has been fixed in version 4.4.7.