CVE-2023-35858: Moderncampus Omni CMS

Medium severity, CVSS 5.3. EPSS: 0.5% chance of exploitation in the next 30 days.

XPath Injection vulnerabilities in the blog and RSS functions of Modern Campus - Omni CMS 2023.1 allow a remote, unauthenticated attacker to obtain application information.

Affected products

• Moderncampus Omni CMS: version 2023.1 only

Published 2024-06-13. Last modified 2026-06-17.