CVE-2023-35860

MEDIUM 5.3CVE-2023-35860 · Published 13/06/2024 · updated 17/06/2026

In short

CVE-2023-35860 is a MEDIUM (CVSS 5.3) vulnerability affecting omni cms (moderncampus).
Chance of exploitation in the next 30 days (EPSS): 0.80%, higher than 56.8% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
omni cms moderncampus	`= 2023.1`	No fix yet

Description

A Directory Traversal vulnerability in Modern Campus - Omni CMS 2023.1 allows a remote, unauthenticated attacker to enumerate file system information via the dir parameter to listing.php or rss.php.

References

lp.constantcontactpages.com/cu/c2nSB5D/moderncampuscve · Vendor Advisory

More vulnerabilities in omni cms

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free