# CVE-2023-30212

OURPHP <= 7.2.0 is vulnerale to Cross Site Scripting (XSS) via /client/manage/ourphp_out.php.

- Page: https://www.vulneraibility.com/cve/CVE-2023-30212
- CVSS: 6.1
- Known exploited: not in CISA KEV as of our last sync
- EPSS: 8.12% (percentile 94.9)
- Unvetted proof-of-concept code on GitHub: 15 GitHub proofs of concept · 1 Nuclei template (first 2023-05-25)
- CISA SSVC: exploitation none, automatable no, technical impact partial (assessed 2025-02-03)
- Weakness: CWE-79
- Published: 2023-04-26

## Affected

- ourphp:ourphp

## References

- [other] https://wanheiqiyihu.top/2023/03/27/OURPHP-v7-2-0-ourphp-out-php-Reflection-xss/

---
Summary, impact and action are written by the vulneraibility.com AI analysis pipeline from the CVE record, NVD, CISA and FIRST data; verify against the references.