What’s Vulnerable › Vulnerabilities

CVE-2023-53927: PHPJabbers Simple CMS 5.0 Stored Cross-Site Scripting via Section Creation

• Severity: medium (CVSS 5.4 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2025-12-17 · updated 2026-06-17
• Weakness: CWE-79

Description

PHPJabbers Simple CMS 5.0 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts through section name parameters. Attackers can create sections with embedded JavaScript payloads that will execute when administrators view the sections, potentially enabling client-side code execution.

Affected products

• PHPJabbers Simple CMS: 5.0

References

• https://www.exploit-db.com/exploits/51415
• https://www.phpjabbers.com/
• https://www.vulncheck.com/advisories/phpjabbers-simple-cms-stored-cross-site-scripting-via-section-creation
• https://www.exploit-db.com/exploits/51415

Get alerted when CVE-2023-53927 or the next vulnerability affects your stack