CVE-2023-39643: Blmodules Xmlfeeds Pro

Critical severity, CVSS 9.8. EPSS: 0.8% chance of exploitation in the next 30 days.

Bl Modules xmlfeeds before v3.9.8 was discovered to contain a SQL injection vulnerability via the component SearchApiXml::Xmlfeeds().

Affected products

• Blmodules Xmlfeeds Pro: before 3.9.8 (fixed in 3.9.8)

Published 2023-09-15. Last modified 2026-06-17.