CVE-2023-23151: Bloofox Bloofoxcms

Medium severity, CVSS 6.5. EPSS: 1% chance of exploitation in the next 30 days.

bloofoxCMS v0.5.2.1 was discovered to contain an arbitrary file deletion vulnerability via the component /include/inc_content_media.php.

Affected products

• Bloofox Bloofoxcms: version 0.5.2.1 only

Published 2023-01-26. Last modified 2026-06-17.