CVE-2023-37986

MEDIUM · CVSS 5.9 EPSS 0.36%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2023-09-01 · Last synced 2026-08-04

CyberRota Analysis

This is a medium severity vulnerability with a CVSS score of 5.9. See the original NVD description below for full technical details.

CVE

CVE-2023-37986

Severity

MEDIUM

CVSS

5.9

EPSS

0.36%

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in miniOrange YourMembership Single Sign On – YM SSO Login plugin <= 1.1.3 versions.