CVE-2023-33355: Thecosy Icecms

High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days.

IceCMS v1.0.0 has Insecure Permissions. There is unauthorized access to the API, resulting in the disclosure of sensitive information.

Affected products

• Thecosy Icecms: version 1.0.0 only

Published 2023-05-25. Last modified 2026-06-17.