CVE-2023-3474

A vulnerability has been found in SimplePHPscripts Simple Blog 3.2 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file preview.php of the component URL Parameter Handler. The manipulation leads to cross site scripting. The attack can be launched remotely. It is recommended to upgrade the affected component. The identifier VDB-232753 was assigned to this vulnerability.

• CWE-79

• https://vuldb.com/?ctiid.232753Third Party Advisory, VDB Entry
• https://vuldb.com/?id.232753Permissions Required, Third Party Advisory, VDB Entry
• https://vuldb.com/?ctiid.232753Third Party Advisory, VDB Entry
• https://vuldb.com/?id.232753Permissions Required, Third Party Advisory, VDB Entry

Published

Jun 30, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-34732An issue in the userId parameter in the change password func…5.4
• CVE-2023-34733A lack of exception handling in the Volkswagen Discover Medi…6.8
• CVE-2023-34734Annet AC Centralized Management Platform 1.02.040 is vulnera…4.8
• CVE-2023-34735Property Cloud Platform Management Center 1.0 is vulnerable …9.8
• CVE-2023-34736Guantang Equipment Management System version 4.12 is vulnera…7.2
• CVE-2023-34738Chemex through 3.7.1 is vulnerable to arbitrary file upload.9.8
• CVE-2023-34747File upload vulnerability in ujcms 6.0.2 via /api/backend/co…9.8
• CVE-2023-3475A vulnerability was found in SimplePHPscripts Event Script 2…6.1
• CVE-2023-34750bloofox v0.5.2.1 was discovered to contain a SQL injection v…9.8
• CVE-2023-34751bloofox v0.5.2.1 was discovered to contain a SQL injection v…9.8
• CVE-2023-34752bloofox v0.5.2.1 was discovered to contain a SQL injection v…9.8
• CVE-2023-34753bloofox v0.5.2.1 was discovered to contain a SQL injection v…9.8