CVE-2023-3537: SimplePHPscripts News Script PHP Pro URL Parameter preview.php cross site scripting

Published Jul 7, 2023

Updated

A vulnerability classified as problematic has been found in SimplePHPscripts News Script PHP Pro 2.4. This affects an unknown part of the file /preview.php of the component URL Parameter Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The identifier VDB-233289 was assigned to this vulnerability.

Affected Software

1 affected component

SimplePHPscripts News Script PHP Pro=2.4

Event History

Jul 7, 2023

CVE Published

01:31 PM

Data Sourced

01:31 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·02:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2023-3537?

CVE-2023-3537 is classified as a problematic vulnerability due to its potential to allow cross site scripting attacks.

Which software versions are affected by CVE-2023-3537?

CVE-2023-3537 affects SimplePHPscripts News Script PHP Pro version 2.4.

How do I fix CVE-2023-3537?

To fix CVE-2023-3537, you should update to a patched version of SimplePHPscripts News Script PHP Pro if available.

What component is exploited in CVE-2023-3537?

CVE-2023-3537 exploits the URL Parameter Handler in the /preview.php file.

What kind of attack can CVE-2023-3537 facilitate?

CVE-2023-3537 can facilitate cross site scripting (XSS) attacks.