CVE-2023-22953

Mô tả

Tham khảo

• docs.expressionengine.com/latest/installation/changelog.html · Release Notes
• gist.github.com/ahmedsherif/7b8f18a54a80ae0ac5ff6307c35b7d43
• hackerone.com/reports/1820492 · Permissions Required

Lỗ hổng khác của expressionengine

• CVE-2025-59473CAO 7.2SQL Injection vulnerability in the Structure for Admin authenticated user
• CVE-2024-38454TRUNG BÌNH 6.1ExpressionEngine before 7.4.11 allows XSS.
• CVE-2020-8242CAO 7.2Unsanitized user input in ExpressionEngine <= 5.4.0 control panel member creation leads to an SQL injection. The user needs member creation/…
• CVE-2021-33199NGHIÊM TRỌNG 9.8In Expression Engine before 6.0.3, addonIcon in Addons/file/mod.file.php relies on the untrusted input value of input->get('file') instead o…
• CVE-2021-27230CAO 8.8ExpressionEngine before 5.4.2 and 6.x before 6.0.3 allows PHP Code Injection by certain authenticated users who can leverage Translate::save…