CVE-2023-46378: 1234n Minicms

Medium severity, CVSS 5.4. EPSS: 0.4% chance of exploitation in the next 30 days.

Stored Cross Site Scripting (XSS) vulnerability in MiniCMS 1.1.1 allows attackers to run arbitrary code via crafted string appended to /mc-admin/conf.php.

Affected products

• 1234n Minicms: version 1.11 only

Published 2023-10-31. Last modified 2026-06-17.