CVE-2023-3476: SimplePHPscripts GuestBook Script URL Parameter preview.php cross site scripting

Published Jun 30, 2023

Updated

A vulnerability was found in SimplePHPscripts GuestBook Script 2.2. It has been classified as problematic. This affects an unknown part of the file preview.php of the component URL Parameter Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-232755.

Affected Software

1 affected component

SimplePHPscripts GuestBook Script=2.2

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade SimplePHPscripts GuestBook Script 2.2 to a version that resolves this vulnerability.
Patch VDB-232755
Compensating control
Apply a protective compensating control for the remote URL parameter XSS in preview.php (e.g., add a WAF/filters to block malicious payloads targeting the preview.php URL Parameter preview.php) until the SimplePHPscripts GuestBook Script upgrade is completed.

Event History

Jun 30, 2023

CVE Published

07:00 AM

Data Sourced

07:00 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·07:15 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2023-3476?

CVE-2023-3476 has been classified as a problematic vulnerability.

How do I fix CVE-2023-3476?

To fix CVE-2023-3476, update the SimplePHPscripts GuestBook Script to the latest version available.

What type of vulnerability is CVE-2023-3476?

CVE-2023-3476 is a cross-site scripting (XSS) vulnerability.

Which component is affected by CVE-2023-3476?

CVE-2023-3476 affects the preview.php file of the URL Parameter Handler component.

What version of GuestBook Script is vulnerable to CVE-2023-3476?

CVE-2023-3476 affects version 2.2 of SimplePHPscripts GuestBook Script.