CVE-2013-3728: Kasseler-CMS

Low severity, CVSS 3.5. EPSS: 3% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in Kasseler CMS before 2 r1232 allows remote authenticated users with permissions to create categories to inject arbitrary web script or HTML via the cat parameter in an admin_new_category action to admin.php.

Affected products

• Kasseler-CMS Kasseler-CMS: up to and including 2

Published 2014-03-13. Last modified 2026-06-16.