CVE-2023-35860: Moderncampus Omni CMS

Medium severity, CVSS 5.3. EPSS: 0.8% chance of exploitation in the next 30 days.

A Directory Traversal vulnerability in Modern Campus - Omni CMS 2023.1 allows a remote, unauthenticated attacker to enumerate file system information via the dir parameter to listing.php or rss.php.

Affected products

• Moderncampus Omni CMS: version 2023.1 only

Published 2024-06-13. Last modified 2026-06-17.