o8sdm leads to cross site scripting. ","inLanguage":"en-US","identifier":"CVE-2023-3541","datePublished":"2023-07-07T16:15:09.870000Z","dateModified":"2026-06-17T06:14:18.600000Z","about":{"@type":"Thing","name":"CVE-2023-3541","identifier":"CVE-2023-3541"},"isPartOf":{"@type":"WebSite","name":"GotRooted","url":"https://gotrooted.org/"},"publisher":{"@type":"Organization","name":"GotRooted","logo":{"@type":"ImageObject","url":"https://gotrooted.org/logo.png","width":640,"height":640}}},{"@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://gotrooted.org/"},{"@type":"ListItem","position":2,"name":"cve","item":"https://gotrooted.org/cve"},{"@type":"ListItem","position":3,"name":"CVE 2023 3541","item":"https://gotrooted.org/cve/CVE-2023-3541"}]}]}

VULNERABILITY INTELLIGENCE

CVE-2023-3541

CVSS score6.1 MEDIUM
EPSS probability0.36%
CISA KEVNot currently listed
Published2023-07-07
Last modified2026-06-17

Description

A vulnerability has been found in ThinuTech ThinuCMS 1.5 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /author_posts.php. The manipulation of the argument author with the input g6g12<script>alert(1)</script>o8sdm leads to cross site scripting. The attack can be launched remotely. The identifier VDB-233293 was assigned to this vulnerability.