CVE-2023-4913: Cecil Cross-site Scripting vulnerability – CVSS 6.1 · Watchpost

← All vulnerabilities

Cecil Cross-site Scripting vulnerability

中危 6.1CVE-2023-4913 · GHSA-p9q8-7x22-5x77 · Published 12/09/2023 · updated 17/06/2026

要点

CVE-2023-4913 是影响 cecil/cecil, cecil (cecil) 的中危 (CVSS 6.1)漏洞。
未来 30 天内被利用的概率（EPSS）：0.52%，高于 44.2% 的漏洞。
修复：升级到 7.47.1 或更高版本。

Package	Affected versions	Patched versions
cecil/cecil Packagist	`< 7.47.1`	`7.47.1`
cecil cecil	`≥ 7.27.3, < 7.47.1`	`7.47.1`

Description

Cross-site Scripting (XSS) - Reflected in GitHub repository cecilapp/cecil prior to 7.47.1.

NVD description

Cross-site Scripting (XSS) - Reflected in GitHub repository cecilapp/cecil prior to 7.47.1.

References

nvd.nist.gov/vuln/detail/CVE-2023-4913 · ADVISORY
cecilapp/cecil commit 00dc79f · WEB
cecilapp/cecil · PACKAGE
huntr.dev/bounties/d2a9ec4d-1b4b-470b-87da-ec069f5925ae · WEB

cecil/cecil 的其他漏洞

查看全部 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free