# CVEs published 2023-09-10

11 CVEs were published on September 10, 2023: 0 critical, 1 high. Days are UTC.

- [CVE-2023-4879](https://cve.now/CVE-2023-4879.md): Cross-site Scripting (XSS) - Stored in instantsoft/icms2 (CVSS 3.5, instantsoft/icms2)
- [CVE-2023-4878](https://cve.now/CVE-2023-4878.md): Server-Side Request Forgery (SSRF) in instantsoft/icms2 (CVSS 4.3, instantsoft/icms2)
- [CVE-2023-4873](https://cve.now/CVE-2023-4873.md): Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform importexport.php os command injection (CVSS 6.3, Byzoro Smart S45F Multi-Service Secure Gateway Intelligent…)
- [CVE-2023-4872](https://cve.now/CVE-2023-4872.md): SourceCodester Contact Manager App add.php sql injection (CVSS 6.3, SourceCodester Contact Manager App)
- [CVE-2023-4871](https://cve.now/CVE-2023-4871.md): SourceCodester Contact Manager App delete.php sql injection (CVSS 6.3, SourceCodester Contact Manager App)
- [CVE-2023-4870](https://cve.now/CVE-2023-4870.md): SourceCodester Contact Manager App Contact Information index.php cross site scripting (CVSS 3.5, SourceCodester Contact Manager App)
- [CVE-2023-4869](https://cve.now/CVE-2023-4869.md): SourceCodester Contact Manager App update.php cross-site request forgery (CVSS 4.3, SourceCodester Contact Manager App)
- [CVE-2023-4868](https://cve.now/CVE-2023-4868.md): SourceCodester Contact Manager App add.php cross-site request forgery (CVSS 4.3, SourceCodester Contact Manager App)
- [CVE-2023-4877](https://cve.now/CVE-2023-4877.md): Exposure of Sensitive Information to an Unauthorized Actor in hamza417/inure (CVSS 5.5, hamza417/inure)
- [CVE-2023-4876](https://cve.now/CVE-2023-4876.md): Exposure of Sensitive Information to an Unauthorized Actor in hamza417/inure (CVSS 7.9, hamza417/inure)
- [CVE-2023-4867](https://cve.now/CVE-2023-4867.md): Xintian Smart Table Integrated Management System Added Site Page AddUpdateSites.aspx sql injection (CVSS 6.3, Xintian Smart Table Integrated Management System)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2023-09-10
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.