CVE-2023-37164: Diafan Diafan.cms

Medium severity, CVSS 6.1. EPSS: 0.6% chance of exploitation in the next 30 days.

Diafan CMS v6.0 was discovered to contain a reflected cross-site scripting via the cat_id parameter at /shop/?module=shop&action=search.

Affected products

• Diafan Diafan.cms: version 6.0 only

Published 2023-07-20. Last modified 2026-06-17.