CVE-2023-3465
SimplePHPscripts Classified Ads Script HTTP POST Request user.php cross site scripting
Vexday Risk Score
8Bajo
Decisión SSVC (CISA)
Track
Sin señal de explotación → monitorear
CVSS 3.5EPSS 0.4%KEV nãoPoC —Nuclei —Metasploit —Patch referenciado
Ciclo de vida
29 jun 2023Publicada en NVD
Recomendación: Monitorear — sin señal de explotación por ahora.
A vulnerability was found in SimplePHPscripts Classified Ads Script 1.8. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file user.php of the component HTTP POST Request Handler. The manipulation of the argument title leads to cross site scripting. The attack can be launched remotely. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-232711.
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
Productos afectados
SimplePHPscripts · Classified Ads Script¿Quieres saber si tu infraestructura está expuesta a esto?
Hablar con TrueHacking →