CVE-2023-30148

MEDIUM 5.4CVE-2023-30148 · Published 14/10/2023 · updated 17/06/2026

In short

CVE-2023-30148 is a MEDIUM (CVSS 5.4) vulnerability affecting multi html block (store-opart).
Chance of exploitation in the next 30 days (EPSS): 0.49%, higher than 42.1% of all vulnerabilities.
Fix: update to 2.0.12 or later.

Package	Affected versions	Patched versions
multi html block store-opart	`< 2.0.12`	`2.0.12`

Description

Multiple Stored Cross Site Scripting (XSS) vulnerabilities in Opart opartmultihtmlblock before version 2.0.12 and Opart multihtmlblock* version 1.0.0, allows remote authenticated users to inject arbitrary web script or HTML via the body_text or body_text_rude field in /sourcefiles/BlockhtmlClass.php and /sourcefiles/blockhtml.php.

References

security.friendsofpresta.org/modules/2023/10/10/opartmultihtmlblock.html · Patch

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free