A vulnerability was found in SimplePHPscripts Event Script 2.1 and classified as problematic. Affected by this issue is some unknown functionality of the file preview.php of the component URL Parameter Handler. The manipulation leads to cross site scripting. The attack may be launched remotely. It is recommended to upgrade the affected component. VDB-232754 is the identifier assigned to this vulnerability.
References
| Link | Resource |
|---|---|
| https://vuldb.com/?ctiid.232754 | Third Party Advisory VDB Entry |
| https://vuldb.com/?id.232754 | Permissions Required Third Party Advisory VDB Entry |
Configurations
History
06 Jul 2023, 18:48
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:simplephpscripts:event_script:2.1:*:*:*:*:*:*:* | |
| First Time |
Simplephpscripts
Simplephpscripts event Script |
|
| References | (MISC) https://vuldb.com/?id.232754 - Permissions Required, Third Party Advisory, VDB Entry | |
| References | (MISC) https://vuldb.com/?ctiid.232754 - Third Party Advisory, VDB Entry | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.1 |
30 Jun 2023, 07:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-06-30 07:15
Updated : 2024-05-17 02:27
NVD link : CVE-2023-3475
Mitre link : CVE-2023-3475
CVE.ORG link : CVE-2023-3475
JSON object : View
Products Affected
simplephpscripts
- event_script
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')