CVE-2023-36210

CRITICAL

MotoCMS 3.4.3 - SSTI

Title source: llm

Description

MotoCMS Version 3.4.3 Store Category Template was discovered to contain a Server-Side Template Injection (SSTI) vulnerability via the keyword parameter.

Exploits (1)

exploitdb WORKING POC

by tmrswrr · textwebappsmultiple

https://www.exploit-db.com/exploits/51499

View Code ZIP pw:eip

References (2)

[Exploit, Third Party Advisory] https://vulners.com/zdt/1337DAY-ID-38750

[Exploit, Third Party Advisory, VDB Entry] https://www.exploit-db.com/exploits/51499

Scores

CVSS v3 9.8

EPSS 0.0967

EPSS Percentile 92.9%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-74

Status published

Products (1)

motocms/motocms 3.4.3

Published Aug 01, 2023

Tracked Since Feb 18, 2026