CVE-2023-52048: Ruoyi

Medium severity, CVSS 4.7. EPSS: 0.3% chance of exploitation in the next 30 days.

RuoYi v4.7.8 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /system/notice/.

Affected products

• Ruoyi Ruoyi: version 4.7.8 only

Published 2024-02-28. Last modified 2026-06-17.