CVE-2023-3475: SimplePHPscripts Event Script URL Parameter preview.php cross site scripting

Published Jun 30, 2023

Updated

A vulnerability was found in SimplePHPscripts Event Script 2.1 and classified as problematic. Affected by this issue is some unknown functionality of the file preview.php of the component URL Parameter Handler. The manipulation leads to cross site scripting. The attack may be launched remotely. It is recommended to upgrade the affected component. VDB-232754 is the identifier assigned to this vulnerability.

Affected Software

1 affected component

SimplePHPscripts Event Script=2.1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade SimplePHPscripts Event Script to a version that resolves this vulnerability.
Fixed in 2.1Patch VDB-232754

Event History

Jun 30, 2023

CVE Published

07:00 AM

Data Sourced

07:00 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·07:15 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2023-3475?

CVE-2023-3475 is classified as a problematic vulnerability affecting SimplePHPscripts Event Script 2.1.

How do I fix CVE-2023-3475?

To fix CVE-2023-3475, you should update the SimplePHPscripts Event Script to a secure version that addresses the cross site scripting vulnerability.

What type of vulnerability is CVE-2023-3475?

CVE-2023-3475 is a cross site scripting (XSS) vulnerability.

Which software is affected by CVE-2023-3475?

CVE-2023-3475 affects SimplePHPscripts Event Script version 2.1.

What is the impact of CVE-2023-3475?

The impact of CVE-2023-3475 includes the potential for attackers to execute malicious scripts in users' browsers.