CVE-2023-51252: Publiccms

Medium severity, CVSS 5.4. EPSS: 0.3% chance of exploitation in the next 30 days.

PublicCMS 4.0 is vulnerable to Cross Site Scripting (XSS). Because files can be uploaded and online preview function is provided, pdf files and html files containing malicious code are uploaded, an XSS popup window is realized through online viewing.

Affected products

• Publiccms Publiccms: version 4.0 only

Published 2024-01-10. Last modified 2026-06-17.