CVE-2023-36223: Bbs-Go

Medium severity, CVSS 5.4. EPSS: 0.6% chance of exploitation in the next 30 days.

Cross Site Scripting vulnerability in mlogclub bbs-go v. 3.5.5. and before allows a remote attacker to execute arbitrary code via a crafted payload to the announcements parameter in the settings function.

Affected products

• Bbs-Go Bbs-Go: up to and including 3.5.5

Published 2023-07-03. Last modified 2026-07-09.