CVE-2023-44954: Bigtreecms Bigtree CMS

Medium severity, CVSS 5.4. EPSS: 0.6% chance of exploitation in the next 30 days.

Cross Site Scripting vulnerability in BigTree CMS v.4.5.7 allows a remote attacker to execute arbitrary code via the ID parameter in the Developer Settings functions.

Affected products

• Bigtreecms Bigtree CMS: version 4.5.7 only

Published 2023-11-01. Last modified 2026-06-17.