CVE-2023-3537

Summary

CVE-2023-3537 is a newly discovered vulnerability affecting SimplePHPscripts News Script PHP Pro version 2.4. The issue lies within the URL Parameter Handler in the /preview.php file, which is susceptible to cross-site scripting (XSS) attacks. An attacker can exploit this vulnerability remotely by manipulating URL parameters to inject malicious scripts. The Vulnerability Database (VDB) has assigned the identifier VDB-233289 to this security weakness.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.