CVE-2023-3537 SimplePHPscripts News Script PHP Pro URL Parameter preview.php cross site scripting

2023-07-0713:31:03

CWE-79

VulDB

raw.githubusercontent.com

vulnerability

simplephpscripts

news script

php pro

url parameter

cross site scripting

remote attack

vdb-233289

6.3 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

16.2%

JSON

A vulnerability classified as problematic has been found in SimplePHPscripts News Script PHP Pro 2.4. This affects an unknown part of the file /preview.php of the component URL Parameter Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The identifier VDB-233289 was assigned to this vulnerability.