Skip to content
CVE PROGRAM SOURCE RECORD5.1 Medium

CVE-2023-53927

PHPJabbers Simple CMS 5.0 Stored Cross-Site Scripting via Section Creation

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
VulnCheck

Description

PHPJabbers Simple CMS 5.0 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts through section name parameters. Attackers can create sections with embedded JavaScript payloads that will execute when administrators view the sections, potentially enabling client-side code execution.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

PHPJabbers Simple CMS

  • 5.0affected

References