CVE-2023-45958: Thirtybees Thirty Bees

Medium severity, CVSS 6.1. EPSS: 0.3% chance of exploitation in the next 30 days.

Thirty Bees Core v1.4.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the backup_pagination parameter at /controller/AdminController.php. This vulnerability allows attackers to execute arbitrary JavaScript in the web browser of a user via a crafted payload.

Affected products

• Thirtybees Thirty Bees: version 1.4.0 only

Published 2023-10-18. Last modified 2026-06-17.