# CVEs published 2023-08-26

6 CVEs were published on August 26, 2023: 0 critical, 1 high. Days are UTC.

- [CVE-2023-4548](https://cve.now/CVE-2023-4548.md): SPA-Cart eCommerce CMS GET Parameter search sql injection (CVSS 5.3, SPA-Cart eCommerce CMS)
- [CVE-2023-4547](https://cve.now/CVE-2023-4547.md): SPA-Cart eCommerce CMS search cross site scripting (CVSS 5.1, SPA-Cart eCommerce CMS)
- [CVE-2023-4546](https://cve.now/CVE-2023-4546.md): Byzoro Smart S85F Management Platform licence.php access control (CVSS 3.5, Byzoro Smart S85F Management Platform)
- [CVE-2023-4545](https://cve.now/CVE-2023-4545.md): IBOS OA export&checkids=x sql injection (CVSS 6.3, IBOS OA)
- [CVE-2023-4544](https://cve.now/CVE-2023-4544.md): Byzoro Smart S85F Management Platform php.ini direct request (CVSS 4.3, Byzoro Smart S85F Management Platform)
- [CVE-2023-36741](https://cve.now/CVE-2023-36741.md): Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability (CVSS 8.3, Microsoft Edge)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2023-08-26
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.