CVE-2023-3538: SimplePHPscripts Photo Gallery PHP URL Parameter preview.php cross site scripting

Published Jul 7, 2023

Updated

A vulnerability classified as problematic was found in SimplePHPscripts Photo Gallery PHP 2.0. This vulnerability affects unknown code of the file /preview.php of the component URL Parameter Handler. The manipulation leads to cross site scripting. The attack can be initiated remotely. VDB-233290 is the identifier assigned to this vulnerability.

Affected Software

1 affected component

SimplePHPscripts Photo Gallery PHP=2.0

Event History

Jul 7, 2023

CVE Published

02:00 PM

Data Sourced

02:00 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·02:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2023-3538?

CVE-2023-3538 is classified as a problematic vulnerability due to its potential for cross site scripting.

How do I fix CVE-2023-3538?

To fix CVE-2023-3538, ensure you validate and sanitize all inputs in the /preview.php file.

Which software is affected by CVE-2023-3538?

CVE-2023-3538 affects SimplePHPscripts Photo Gallery PHP version 2.0.

What type of vulnerability is CVE-2023-3538?

CVE-2023-3538 is a cross site scripting (XSS) vulnerability.

Can CVE-2023-3538 be exploited remotely?

Yes, CVE-2023-3538 can be exploited remotely by initiating an attack through the affected component.