CVE-2023-3465: SimplePHPscripts Classified Ads Script HTTP POST Request user.php cross site scripting

Published Jun 29, 2023

Updated

A vulnerability was found in SimplePHPscripts Classified Ads Script 1.8. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file user.php of the component HTTP POST Request Handler. The manipulation of the argument title leads to cross site scripting. The attack can be launched remotely. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-232711.

Affected Software

1 affected component

SimplePHPscripts Classified Ads Script Php=1.8

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade SimplePHPscripts Classified Ads Script 1.8 (user.php HTTP POST Request Handler) to a version that resolves this vulnerability.
Fixed in 1.8Patch VDB-232711

Event History

Jun 29, 2023

CVE Published

09:00 PM

Data Sourced

09:00 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·09:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2023-3465?

CVE-2023-3465 has been declared a problematic vulnerability affecting SimplePHPscripts Classified Ads Script 1.8.

How do I fix CVE-2023-3465?

To fix CVE-2023-3465, users should update their SimplePHPscripts Classified Ads Script to the latest version or apply relevant security patches.

What component is affected by CVE-2023-3465?

CVE-2023-3465 affects the HTTP POST Request Handler functionality in the file user.php.

What type of attack can exploit CVE-2023-3465?

CVE-2023-3465 can be exploited through manipulating the argument title in HTTP POST requests.

Who is affected by CVE-2023-3465?

Users of SimplePHPscripts Classified Ads Script version 1.8 are affected by CVE-2023-3465.