CVE-2023-46818

—

CVSS 3.1

7.2 high

EPSS

16%p97

Published

Oct 27, 2023 (Oct 27, 2023)

Modified

Jun 17, 2026

Description

An issue was discovered in ISPConfig before 3.2.11p1. PHP code injection can be achieved in the language file editor by an admin if admin_allow_langedit is enabled.

Vendors: ispconfig
Products: ispconfig
Weakness: CWE-94
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (15.7%)

In the news0 stories

No ingested article mentions this CVE yet.