CVE-2023-4158

MEDIUM 5.4CVE-2023-4158 · Published 04/08/2023 · updated 17/06/2026

In short

CVE-2023-4158 is a MEDIUM (CVSS 5.4) vulnerability affecting omeka s (omeka).
Chance of exploitation in the next 30 days (EPSS): 0.46%, higher than 40.3% of all vulnerabilities.
Fix: update to 4.0.3 or later.

Package	Affected versions	Patched versions
omeka s omeka	`< 4.0.3`	`4.0.3`

Cross-site Scripting (XSS) - Stored in GitHub repository omeka/omeka-s prior to 4.0.3.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.