CVE-2023-36210

critical · 9.8

MotoCMS Version 3.4.3 Store Category Template was discovered to contain a Server-Side Template Injection (SSTI) vulnerability via the keyword parameter.

9.8

CVSS

30.9%

EPSS (exploit prob.)

98th

EPSS percentile

2023-08-01

Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-74

Affected products

Vendor	Product	Affected versions
motocms	motocms	3.4.3

Check a specific version with /api/v1/cve/match.

References

https://vulners.com/zdt/1337DAY-ID-38750
https://www.exploit-db.com/exploits/51499
https://vulners.com/zdt/1337DAY-ID-38750
https://www.exploit-db.com/exploits/51499

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2023-36210