Is CVE-2023-5793 actively exploited?

No active exploitation of CVE-2023-5793 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2023-5793 be exploited remotely?

Yes. CVE-2023-5793 is exploitable remotely over the network (CVSS attack vector: Network).

What is the CVSS score of CVE-2023-5793?

CVE-2023-5793 has a CVSS score of 5.4 (MEDIUM).

HOME VULNERABILITIESCVE-2023-5793

MEDIUM

CVE-2023-5793

CWE-79Published: October 26, 2023· Updated: Jun 17, 2026

5.4

CVSS v3.1

Official Description

A vulnerability was found in flusity CMS and classified as problematic. This issue affects the function loadCustomBlocCreateForm of the file /core/tools/customblock.php of the component Dashboard. The manipulation of the argument customblock_place leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. The patch is named 81252bc764e1de2422e79e36194bba1289e7a0a5. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-243599.

NVD Source

Technical Analysis

CVE-2023-5793 can be exploited remotely over the network without requiring physical or adjacent access, significantly expanding the attack surface for threat actors.

Exploitation requires low privileges, which limits the exposure to scenarios where an attacker has already gained initial access.

The vulnerability has a "Changed" scope, meaning successful exploitation can impact components beyond the vulnerable component itself — such as the host operating system or adjacent services.

From a weakness classification perspective (CWE-79): Cross-site scripting (XSS) vulnerabilities allow attackers to inject malicious scripts into web pages viewed by other users.