CVE-2023-3539: SimplePHPscripts Simple Forum PHP URL Parameter preview.php cross site scripting

Published Jul 7, 2023

Updated

A vulnerability, which was classified as problematic, has been found in SimplePHPscripts Simple Forum PHP 2.7. This issue affects some unknown processing of the file /preview.php of the component URL Parameter Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. The associated identifier of this vulnerability is VDB-233291.

Affected Software

1 affected component

SimplePHPscripts Simple Forum PHP=2.7

Event History

Jul 7, 2023

CVE Published

02:31 PM

Data Sourced

02:31 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·03:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2023-3539?

CVE-2023-3539 is classified as a problematic vulnerability due to the potential for cross-site scripting attacks.

How do I fix CVE-2023-3539?

To mitigate CVE-2023-3539, you should sanitize and validate all user input in the /preview.php file to prevent XSS.

What component is affected by CVE-2023-3539?

CVE-2023-3539 affects the URL Parameter Handler component of Simple Forum PHP version 2.7.

What type of attack does CVE-2023-3539 enable?

CVE-2023-3539 enables cross-site scripting (XSS) attacks through improper handling of URL parameters.

Which version of Simple Forum PHP is impacted by CVE-2023-3539?

CVE-2023-3539 impacts Simple Forum PHP version 2.7.