CVE-2023-39378: Siberiancms

High severity, CVSS 8.8. EPSS: 0.9% chance of exploitation in the next 30 days.

SiberianCMS - CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') by an unauthenticated user

Affected products

• Siberiancms Siberiancms: from 4.0.0, before 4.20.44 (fixed in 4.20.44); from 5.0.0, before 5.0.4 (fixed in 5.0.4)

Published 2023-09-27. Last modified 2026-06-17.