Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2021-47950

Advanced Guestbook 2.4.4 Persistent XSS via Smilies

Advanced Guestbook 2.4.4 contains a persistent cross-site scripting vulnerability in the smilies administration interface that allows authenticated attackers to inject malicious scripts by manipulating the s_emotion parameter. Attackers can submit POST requests to admin.php with JavaScript code in the s_emotion field, which executes when administrators view the smilies tab.

CVSS 4.0 · 5.1 Medium EPSS < 1% KEV · Not listed
Vendors
Ampps Simplephpscripts
Products
Advanced Guestbook Guestbook Script
CVE-2023-3476

SimplePHPscripts GuestBook Script URL Parameter preview.php cross site scripting

A vulnerability was found in SimplePHPscripts GuestBook Script 2.2. It has been classified as problematic. This affects an unknown part of the file preview.php of the component URL Parameter Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-232755.

CVSS 3.1 · 3.5 Low EPSS < 1% KEV · Not listed
Vendors
Simplephpscripts
Products
Guestbook Script