A vulnerability was found in SimplePHPscripts Event Script 2.1 and classified as problematic. Affected by this issue is some unknown functionality of the file preview.php of the component URL Parameter Handler. The manipulation leads to cross site scripting. The attack may be launched remotely. It is recommended to upgrade the affected component. VDB-232754 is the identifier assigned to this vulnerability.
References
| Link | Resource |
|---|---|
| https://vuldb.com/?id.232754 | Permissions Required Third Party Advisory VDB Entry |
| https://vuldb.com/?ctiid.232754 | Third Party Advisory VDB Entry |
Configurations
History
06 Jul 2023, 18:48
| Type | Values Removed | Values Added |
|---|---|---|
| References | (MISC) https://vuldb.com/?id.232754 - Permissions Required, Third Party Advisory, VDB Entry | |
| References | (MISC) https://vuldb.com/?ctiid.232754 - Third Party Advisory, VDB Entry | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.1 |
| First Time |
Simplephpscripts event Script
Simplephpscripts |
|
| CPE | cpe:2.3:a:simplephpscripts:event_script:2.1:*:*:*:*:*:*:* |
30 Jun 2023, 07:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-06-30 07:15
Updated : 2024-05-17 02:27
NVD link : CVE-2023-3475
Mitre link : CVE-2023-3475
JSON object : View
Products Affected
simplephpscripts
- event_script
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')