CVE-2023-3538

MediumCVSS 5.4/10Last modified Jun 17, 2026

Description

A vulnerability classified as problematic was found in SimplePHPscripts Photo Gallery PHP 2.0. This vulnerability affects unknown code of the file /preview.php of the component URL Parameter Handler. The manipulation leads to cross site scripting. The attack can be initiated remotely. VDB-233290 is the identifier assigned to this vulnerability.

Metrics

CVSS 3.1 5.4/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published
Jul 7, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-353807.8Windows Kernel Elevation of Privilege VulnerabilityCVE-2023-353818.8Windows Fax Service Remote Code Execution VulnerabilityCVE-2023-353827.8Windows Kernel Elevation of Privilege VulnerabilityCVE-2023-353837.5Microsoft Message Queuing Information Disclosure VulnerabilityCVE-2023-353846.5Windows HTML Platforms Security Feature Bypass VulnerabilityCVE-2023-353859.8Microsoft Message Queuing (MSMQ) Remote Code Execution VulnerabilityCVE-2023-353867.8Windows Kernel Elevation of Privilege VulnerabilityCVE-2023-353878.8Windows Bluetooth A2DP driver Elevation of Privilege VulnerabilityCVE-2023-353888.0Microsoft Exchange Server Remote Code Execution VulnerabilityCVE-2023-353896.5Microsoft Dynamics 365 On-Premises Remote Code Execution VulnerabilityCVE-2023-35396.1A vulnerability, which was classified as problematic, has been found in SimplePHPscripts Simple Forum PHP 2.7. This issue affects some unknoCVE-2023-353907.8.NET and Visual Studio Remote Code Execution Vulnerability
CVE-2023-3538: Medium severity, CVSS 5.4 | Vulnix