CVE-2023-3536

LowCVSS 3.5

Published: 07/07/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.31%

23th percentile — higher than 23% of all known CVEs

Summary

A vulnerability was found in SimplePHPscripts Funeral Script PHP 3.1, rated as problematic. It affects some unknown functionality of the file /preview.php of the URL Parameter Handler component, leading to cross site scripting attacks.

Risk Assessment

An attacker may exploit this vulnerability remotely, posing a risk of session hijacking or data theft.

Recommendation

It is recommended to update to the latest version of the script or implement appropriate security measures to mitigate the risk of XSS attacks.

Original NVD description (English source)

A vulnerability was found in SimplePHPscripts Funeral Script PHP 3.1. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /preview.php of the component URL Parameter Handler. The manipulation leads to cross site scripting. The attack may be launched remotely. The identifier of this vulnerability is VDB-233288.