CVE-2023-3540: SimplePHPscripts NewsLetter Script PHP URL Parameter preview.php cross site scripting

Published Jul 7, 2023

Updated

A vulnerability, which was classified as problematic, was found in SimplePHPscripts NewsLetter Script PHP 2.4. Affected is an unknown function of the file /preview.php of the component URL Parameter Handler. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The identifier of this vulnerability is VDB-233292.

Affected Software

1 affected component

SimplePHPscripts NewsLetter Script PHP=2.4

Event History

Jul 7, 2023

CVE Published

03:00 PM

Data Sourced

03:00 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·03:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2023-3540?

CVE-2023-3540 is classified as problematic due to its potential for leading to cross-site scripting (XSS).

How do I fix CVE-2023-3540?

To fix CVE-2023-3540, update the SimplePHPscripts NewsLetter Script PHP to the latest version or apply any available patches that address the vulnerability.

What component is affected by CVE-2023-3540?

CVE-2023-3540 affects the URL Parameter Handler component in the /preview.php file of SimplePHPscripts NewsLetter Script PHP version 2.4.

Can CVE-2023-3540 lead to any attacks?

Yes, CVE-2023-3540 can lead to cross-site scripting attacks, allowing attackers to execute malicious scripts in users' browsers.

Which software version should I check for CVE-2023-3540?

You should check SimplePHPscripts NewsLetter Script PHP version 2.4 for vulnerabilities related to CVE-2023-3540.