SimplePHPscripts NewsLetter Script PHP URL Parameter preview.php cross site scripting
CVE-2023-3540

3.5LOW

Key Information:

Vendor

SimplePHPscripts

Status
Newsletter Script PHP
Vendor
CVE Published:
7 July 2023

What is CVE-2023-3540?

A vulnerability, which was classified as problematic, was found in SimplePHPscripts NewsLetter Script PHP 2.4. Affected is an unknown function of the file /preview.php of the component URL Parameter Handler. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The identifier of this vulnerability is VDB-233292.

Affected Version(s)

NewsLetter Script PHP 2.4

References

https://vuldb.com/?id.233292
vdb-entrytechnical-description
https://vuldb.com/?ctiid.233292
signature

CVSS V3.1

Score:
3.5
Severity:
LOW
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

skalvin (VulDB User)
.