CVE-2023-37611

Published: 2023-09-18T22:15Z

Last Modified: 2024-11-21T08:12Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

Cross Site Scripting (XSS) vulnerability in Neos CMS 8.3.3 allows a remote authenticated attacker to execute arbitrary code via a crafted SVG file to the neos/management/media component. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt