CVE-2023-3474: SimplePHPscripts Simple Blog URL Parameter preview.php cross site scripting

Severity: medium (CVSS 6.1 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-06-30 · updated 2026-06-17
Weakness: CWE-79

Description

A vulnerability has been found in SimplePHPscripts Simple Blog 3.2 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file preview.php of the component URL Parameter Handler. The manipulation leads to cross site scripting. The attack can be launched remotely. It is recommended to upgrade the affected component. The identifier VDB-232753 was assigned to this vulnerability.

Affected products

SimplePHPscripts Simple Blog: 3.2

References

https://vuldb.com/?ctiid.232753
https://vuldb.com/?id.232753
https://vuldb.com/?ctiid.232753
https://vuldb.com/?id.232753

Get alerted when CVE-2023-3474 or the next vulnerability affects your stack