Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2026-23643

Опубликовано: 16 янв. 2026
Источник: nvd
CVSS3: 5.4
EPSS Низкий

Описание

CakePHP is a rapid development framework for PHP. The PaginatorHelper::limitControl() method has a cross-site-scripting vulnerability via query string parameter manipulation. This issue has been fixed in 5.2.12 and 5.3.1.

EPSS

Процентиль: 12%
0.00039
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 5.4
ubuntu
22 дня назад

CakePHP is a rapid development framework for PHP. The PaginatorHelper::limitControl() method has a cross-site-scripting vulnerability via query string parameter manipulation. This issue has been fixed in 5.2.12 and 5.3.1.

CVSS3: 5.4
debian
22 дня назад

CakePHP is a rapid development framework for PHP. The PaginatorHelper: ...

CVSS3: 5.4
github
22 дня назад

CakePHP PaginatorHelper::limitControl() vulnerable to reflected cross-site-scripting

EPSS

Процентиль: 12%
0.00039
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-79