CVSS 3.1 Score 7.1 of 10 (high)


Published Jul 27, 2023
Updated: Aug 3, 2023
CWE ID 140
CWE ID 863


CVE-2023-38488 is a vulnerability that affects the Kirby content management system versions prior to,,,, and 3.9.6, potentially impacting all Kirby sites that allow potential attackers in the group of authenticated Panel users or external visitors to update a Kirby content file through forms like contact or comment forms. The vulnerability allows attackers with content write access to modify content fields unintentionally, which can lead to altered site content, broken site behavior, or injection of malicious data or code depending on the field type and usage. Sites that do not allow write access for untrusted users or visitors are not affected by this vulnerability. Remediating the issue involves updating to the patched versions of Kirby (, 3.6.6., 3., etc.) to mitigate the potential risks posed by this vulnerability.


Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2023-38488 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options