CVE-2023-30148

MEDIO 5.4CVE-2023-30148 · Published 14/10/2023 · updated 17/06/2026

En resumen

CVE-2023-30148 es una vulnerabilidad MEDIO (CVSS 5.4) que afecta a multi html block (store-opart).
Probabilidad de explotación en los próximos 30 días (EPSS): 0.49%, mayor que el 42.1% de las vulnerabilidades.
Solución: actualizar a 2.0.12 o posterior.

Package	Affected versions	Patched versions
multi html block store-opart	`< 2.0.12`	`2.0.12`

Description

Multiple Stored Cross Site Scripting (XSS) vulnerabilities in Opart opartmultihtmlblock before version 2.0.12 and Opart multihtmlblock* version 1.0.0, allows remote authenticated users to inject arbitrary web script or HTML via the body_text or body_text_rude field in /sourcefiles/BlockhtmlClass.php and /sourcefiles/blockhtml.php.

References

security.friendsofpresta.org/modules/2023/10/10/opartmultihtmlblock.html · Patch

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free