Skip to content

SimplePHPscripts · weakness class

Cross-site Scripting

15 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

Every one of the 15 is a mark on the map. Named now: 1 to 15, most at risk first.

  1. Cross-site scripting (XSS) vulnerability in index.php in Simple PHP Scripts gallery 0.1, 0.3, and 0.4 allows remote attackers to inject arbitrary web script or HTML via the galler…CVE-2008-4803Simple Php Scripts · 1.2% likely

    CWE-79

  2. Cross-site scripting (XSS) vulnerability in complete.php in Simple PHP Scripts blog 0.3 allows remote attackers to inject arbitrary web script or HTML via the id parameter. NOTE:…CVE-2008-4802Simple Php Scripts · 0.9% likely

    CWE-79

  3. SimplePHPscripts Classified Ads Script HTTP POST Request user.php cross site scriptingCVE-2023-3465SimplePHPscripts · CVSS 3.5 · 0.5% likely

    CWE-79

  4. SimplePHPscripts Classified Ads Script URL Parameter preview.php cross site scriptingCVE-2023-3464SimplePHPscripts · CVSS 3.5 · 0.5% likely

    CWE-79

  5. SimplePHPscripts GuestBook Script URL Parameter preview.php cross site scriptingCVE-2023-3476SimplePHPscripts · CVSS 3.5 · 0.4% likely

    CWE-79

  6. SimplePHPscripts Simple Blog URL Parameter preview.php cross site scriptingCVE-2023-3474SimplePHPscripts · CVSS 3.5 · 0.4% likely

    CWE-79

  7. SimplePHPscripts Event Script URL Parameter preview.php cross site scriptingCVE-2023-3475SimplePHPscripts · CVSS 3.5 · 0.4% likely

    CWE-79

  8. SimplePHPscripts NewsLetter Script PHP URL Parameter preview.php cross site scriptingCVE-2023-3540SimplePHPscripts · CVSS 3.5 · 0.4% likely

    CWE-79

  9. SimplePHPscripts Simple Forum PHP URL Parameter preview.php cross site scriptingCVE-2023-3539SimplePHPscripts · CVSS 3.5 · 0.4% likely

    CWE-79

  10. SimplePHPscripts News Script PHP Pro URL Parameter preview.php cross site scriptingCVE-2023-3537SimplePHPscripts · CVSS 3.5 · 0.4% likely

    CWE-79

  11. SimplePHPscripts Funeral Script PHP URL Parameter preview.php cross site scriptingCVE-2023-3536SimplePHPscripts · CVSS 3.5 · 0.4% likely

    CWE-79

  12. SimplePHPscripts FAQ Script PHP URL Parameter preview.php cross site scriptingCVE-2023-3535SimplePHPscripts · CVSS 3.5 · 0.4% likely

    CWE-79

  13. SimplePHPscripts Photo Gallery PHP URL Parameter preview.php cross site scriptingCVE-2023-3538SimplePHPscripts · CVSS 3.5 · 0.4% likely

    CWE-79

  14. Simple CMS 2.1 Persistent Cross-Site Scripting via User Input ParametersCVE-2021-47917Simplephpscripts · CVSS 6.4 · 0.3% likely

    CWE-79

  15. Simple CMS 2.1 Non-Persistent Cross-Site Scripting via Preview ParameterCVE-2021-47919Simplephpscripts · CVSS 6.4 · 0.3% likely

    CWE-79

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.