CVE-2023-51420

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

Improper Control of Generation of Code ('Code Injection') vulnerability in Soft8Soft LLC Verge3D Publishing and E-Commerce.This issue affects Verge3D Publishing and E-Commerce: from n/a through 4.5.2.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-94

Affected software

Vendor	Product	Versions
Soft8Soft LLC	Verge3D Publishing and E-Commerce	<= 4.5.2

References

Timeline

Published: Dec 29, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-514218.8Unrestricted Upload of File with Dangerous Type vulnerability in Soft8Soft LLC Verge3D Publishing and E-Commerce.This issue affects Verge3D CVE-2023-514228.8Deserialization of Untrusted Data vulnerability in Saleswonder Team Webinar Plugin: Create live/evergreen/automated/instant webinars, stream CVE-2023-514239.8Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Saleswonder Team Webinar Plugin: Creat CVE-2023-514249.8Improper Privilege Management vulnerability in Saleswonder Team WebinarIgnition allows Privilege Escalation.This issue affects WebinarIgniti CVE-2023-514259.8Improper Privilege Management vulnerability in Jacques Malgrange Rencontre – Dating Site allows Privilege Escalation.This issue affects Renc CVE-2023-514267.1Some Honor products are affected by type confusion vulnerability, successful exploitation could cause information leak.CVE-2023-514277.1Some Honor products are affected by type confusion vulnerability, successful exploitation could cause information leak.CVE-2023-514287.1Some Honor products are affected by type confusion vulnerability, successful exploitation could cause information leak.CVE-2023-514295.5Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause information leak.CVE-2023-51439.8** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, has been found in D-Link DAR-7000 up to 20151231. This is CVE-2023-514305.5Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause information leak.CVE-2023-514315.5Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause device service excepti