CVE-2023-41609: Couchcms

Medium severity, CVSS 6.1. EPSS: 0.4% chance of exploitation in the next 30 days.

An open redirect vulnerability in the sanitize_url() parameter of CouchCMS v2.3 allows attackers to redirect a victim user to an arbitrary web site via a crafted URL.

Affected products

• Couchcms Couchcms: version 2.3 only

Published 2023-09-11. Last modified 2026-06-17.