CVE-2023-38913

Medium · 5.3

CVSS

5.3

EPSS

0.6%

Published

Dec 15, 2025

CISA due date

—

The record

SQL injection vulnerability in anirbandutta9 NEWS-BUZZ v.1.0 allows a remote attacker to execute arbitrary code via a crafted script.

Ecosystem	Package	Introduced	Fixed