CVE-2023-3537 - SimplePHPscripts News Script PHP Pro URL Parameter preview.php cross site scripting

Back Back to CVE browser

MEDIUM

SimplePHPscripts News Script PHP Pro URL Parameter preview.php cross site scripting

Published Jul 7, 2023

6.1

MEDIUM

CVSS 3.1

EPSS 0.36%

Description

A vulnerability classified as problematic has been found in SimplePHPscripts News Script PHP Pro 2.4. This affects an unknown part of the file /preview.php of the component URL Parameter Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The identifier VDB-233289 was assigned to this vulnerability.

Affected products

Vendor SimplePHPscripts Product News Script PHP Pro Default
unknown
Affected
- 2.4

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
SimplePHPscripts	News Script PHP Pro	unknown	Affected 2.4

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-44193
Advisory
https://vuldb.com/?ctiid.233289
signatureThird Party Advisory
https://vuldb.com/?id.233289
vdb-entrytechnical-descriptionThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-44193		Advisory
https://vuldb.com/?ctiid.233289		signatureThird Party Advisory
https://vuldb.com/?id.233289		vdb-entrytechnical-descriptionThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner VulDB

Published Jul 7, 2023

Updated Aug 2, 2024

Reserved Jul 7, 2023

Link CVE-2023-3537

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2023-3537

Red Hat

No data

ENISA EUVD

Assigner VulDB

Published Jul 7, 2023

Updated Aug 2, 2024

Link EUVD-2023-44193

GitHub

No data