CVE-2023-3537

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

A vulnerability classified as problematic has been found in SimplePHPscripts News Script PHP Pro 2.4. This affects an unknown part of the file /preview.php of the component URL Parameter Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The identifier VDB-233289 was assigned to this vulnerability.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

VendorProductVersions
SimplePHPscriptsNews Script PHP Pro2.4

References

Timeline

Published
Jul 7, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-353717.8Microsoft Office Remote Code Execution VulnerabilityCVE-2023-353727.8Microsoft Office Visio Remote Code Execution VulnerabilityCVE-2023-353735.3Mono Authenticode Validation Spoofing VulnerabilityCVE-2023-353747.8Paint 3D Remote Code Execution VulnerabilityCVE-2023-353766.5Microsoft Message Queuing (MSMQ) Denial of Service VulnerabilityCVE-2023-353776.5Microsoft Message Queuing (MSMQ) Denial of Service VulnerabilityCVE-2023-353787.0Windows Projected File System Elevation of Privilege VulnerabilityCVE-2023-353797.8Reliability Analysis Metrics Calculation Engine (RACEng) Elevation of Privilege VulnerabilityCVE-2023-35385.4A vulnerability classified as problematic was found in SimplePHPscripts Photo Gallery PHP 2.0. This vulnerability affects unknown code of thCVE-2023-353807.8Windows Kernel Elevation of Privilege VulnerabilityCVE-2023-353818.8Windows Fax Service Remote Code Execution VulnerabilityCVE-2023-353827.8Windows Kernel Elevation of Privilege Vulnerability
CVE-2023-3537: Medium severity, CVSS 6.1 | Vulnix