CVE-2023-47559 MEDIUM

CVE-2023-47559: QuMagie

Vendor Qnap Systems Inc.

Product QuMagie

Weakness CWE-79 · XSS

Published January 5, 2024

Last update June 3, 2025

View on NVD All CVEs

CVSS base score

5.5/10

Attack vector Network

Attack complexity High

Privileges required Low

User interaction Required

Confidentiality Low

Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L

What the vulnerability does

01Description

A cross-site scripting (XSS) vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow authenticated users to inject malicious code via a network. We have already fixed the vulnerability in the following version: QuMagie 2.2.1 and later

Key dates

02Disclosure timeline

January 5, 2024 CVE published

June 3, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2023-47559 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/79.html

Related vulnerabilities

04Related CVE

CVE-2025-5800 Testimonial Post type <= 1.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via auto_play Parameter CVE-2023-2153 SourceCodester Complaint Management System POST Parameter editable_ajax.php cross site scripting CVE-2024-44047 WordPress IMPress for IDX Broker plugin <= 3.2.2 - Cross Site Scripting (XSS) vulnerability CVE-2021-24964 LiteSpeed Cache < 4.4.4 - IP Check Bypass to Unauthenticated Stored XSS CVE-2014-125027 Yuna Scatari TBDev usersearch.php get_user_icons cross site scripting