CVE-2023-3540

The CVE-2023-3540 entry concerns SimplePHPscripts NewsLetter Script PHP 2.4. The vulnerability lies in the URL Parameter Handler’s /preview.php file, where an input parameter can be manipulated to trigger cross-site scripting. Attacks can be launched remotely. Affected component/function: /previe...