What’s Vulnerable › Vulnerabilities

CVE-2023-39650

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 4.1% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2023-08-28 · updated 2026-06-17
• Weakness: CWE-89

Description

Theme Volty CMS Blog up to version v4.0.1 was discovered to contain a SQL injection vulnerability via the id parameter at /tvcmsblog/single.

Affected products

• Themevolty Theme Volty Cms Blog: before 4.0.1 — fixed in 4.0.1

How to fix

Upgrade to a fixed version: Themevolty Theme Volty Cms Blog 4.0.1. Check the vendor advisory for mitigations.

References

• https://security.friendsofpresta.org/modules/2023/08/24/tvcmsblog.html
• https://themevolty.com/
• https://security.friendsofpresta.org/modules/2023/08/24/tvcmsblog.html
• https://themevolty.com/

Get alerted when CVE-2023-39650 or the next vulnerability affects your stack