CVE-2023-2325

—

CVSS 3.1

5.4 medium

EPSS

<1%p36

Published

Oct 20, 2023 (Oct 20, 2023)

Modified

Jun 17, 2026

Description

Stored XSS Vulnerability in M-Files Classic Web versions before 23.10 and LTS Service Release Versions before 23.2 LTS SR4 and 23.8 LTS SR1allows attacker to execute script on users browser via stored HTML document.

Vendors: m-files
Products: classic web
Weakness: CWE-79
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news0 stories

No ingested article mentions this CVE yet.