CVE-2023-48201: Sunlight-CMS Sunlight CMS

Medium severity, CVSS 5.4. EPSS: 0.6% chance of exploitation in the next 30 days.

Cross Site Scripting (XSS) vulnerability in Sunlight CMS v.8.0.1, allows remote authenticated attackers to execute arbitrary code and escalate privileges via a crafted script to the Content text editor component.

Affected products

• Sunlight-CMS Sunlight CMS: version 8.0.1 only

Published 2024-01-27. Last modified 2026-06-17.