CVE-2023-29638: Winterchen My-Site

Medium severity, CVSS 5.4. EPSS: 0.4% chance of exploitation in the next 30 days.

Cross Site Scripting (XSS) vulnerability in WinterChenS my-site before commit 3f0423da6d5200c7a46e200da145c1f54ee18548, allows attackers to inject arbitrary web script or HTML via editing blog articles.

Affected products

• Winterchen My-Site: before 2023-03-30 (fixed in 2023-03-30)

Published 2023-05-01. Last modified 2026-06-17.