CVE-2023-5793

A vulnerability was found in flusity CMS and classified as problematic. This issue affects the function loadCustomBlocCreateForm of the file /core/tools/customblock.php of the component Dashboard. The manipulation of the argument customblock_place leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. The patch is named 81252bc764e1de2422e79e36194bba1289e7a0a5. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-243599.

• CWE-79
• CWE-79

• https://github.com/flusity/flusity-CMS/commit/81252bc764e1de2422e79e36194bba1289e7a0a5Patch
• https://github.com/flusity/flusity-CMS/issues/1Exploit, Issue Tracking
• https://vuldb.com/?ctiid.243599Permissions Required, Third Party Advisory
• https://vuldb.com/?id.243599Third Party Advisory
• https://github.com/flusity/flusity-CMS/commit/81252bc764e1de2422e79e36194bba1289e7a0a5Patch
• https://github.com/flusity/flusity-CMS/issues/1Exploit, Issue Tracking
• https://vuldb.com/?ctiid.243599Permissions Required, Third Party Advisory
• https://vuldb.com/?id.243599Third Party Advisory

Published

Oct 26, 2023

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-5786A vulnerability was found in GeoServer GeoWebCache up to 1.1…8.8
• CVE-2023-5787A vulnerability was found in Shaanxi Chanming Education Tech…8.8
• CVE-2023-5789A vulnerability classified as problematic has been found in …4.8
• CVE-2023-5790A vulnerability classified as critical was found in SourceCo…9.8
• CVE-2023-5791A vulnerability, which was classified as problematic, was fo…6.1
• CVE-2023-5792A vulnerability has been found in SourceCodester Sticky Note…9.8
• CVE-2023-5794A vulnerability was found in PHPGurukul Online Railway Cater…9.8
• CVE-2023-5795A vulnerability was found in CodeAstro POS System 1.0. It ha…8.8
• CVE-2023-5796A vulnerability was found in CodeAstro POS System 1.0. It ha…8.8
• CVE-2023-5797An improper privilege management vulnerability in the debug …5.5
• CVE-2023-5798The Assistant WordPress plugin before 1.4.4 does not validat…8.8
• CVE-2023-5799The WP Hotel Booking WordPress plugin before 2.0.8 does not …5.4