CVE-2023-51252

PoC —

CVSS 3.1

5.4 medium

EPSS

<1%p22

Published

Jan 10, 2024 (Jan 10, 2024)

Modified

Jun 17, 2026

Description

PublicCMS 4.0 is vulnerable to Cross Site Scripting (XSS). Because files can be uploaded and online preview function is provided, pdf files and html files containing malicious code are uploaded, an XSS popup window is realized through online viewing.

Vendors: publiccms
Products: publiccms
Weakness: CWE-79
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news0 stories

No ingested article mentions this CVE yet.