Vulnerabilities

CVE-2026-23643 - CakePHP PaginatorHelper::limitControl() vulnerable to reflected cross-site-scrip...

2026-01-16 0 views admin

CVE ID : CVE-2026-23643 Published : Jan. 16, 2026, 9:15 p.m. | 1 hour, 4 minutes ago Description : CakePHP is a rapid development framework for PHP. The PaginatorHelper::limitControl() method has a cross-site-scripting vulnerability via query string parameter manipulation. This issue has been fixed in 5.2.12 and 5.3.1. Severity: 5.4 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE Details

CVE ID

CVE-2026-23643

Severity

MEDIUM

Published

Jan. 16, 2026

Affected Product: PHP

🏷️ Tags

cvevulnerabilitysecuritycybersecuritycve-2026-23643mediumphp

CVE-2026-23643 - CakePHP PaginatorHelper::limitControl() vulnerable to reflected cross-site-scrip...

CVE Details

🏷️ Tags

More from Vulnerabilities

CVE-2026-23634 - Pepr Overly Permissive RBAC ClusterRole in Admin Mode

CVE-2025-69581 - Chamillo LMS Information Disclosure Vulnerability

CVE-2019-25297 - Poll, Survey & Quiz Maker Plugin by Opinion Stage < 19.6.25 Stored XSS

CVE-2026-23800 - WordPress Modular DS plugin <= 2.5.2 - privilege escalation vulnerability

Trending

Tech: Go-legacy-winxp: Compile Golang 1.24 code for Windows XP

Tech: Data is the only moat

Tech: Pocket TTS: A high quality TTS that gives your CPU a voice

Tech: AWS European Sovereign Cloud

Tech: JuiceFS is a distributed POSIX file system built on top of Redis and S3