SimplePHPscripts · weakness class
Cross-site Scripting
15 CVEs
Every dot is a CVE in what this vendor ships; the named ones are the most at risk.
Every one of the 15 is a mark on the map. Named now: 1 to 15, most at risk first.
- Cross-site scripting (XSS) vulnerability in index.php in Simple PHP Scripts gallery 0.1, 0.3, and 0.4 allows remote attackers to inject arbitrary web script or HTML via the galler…
- Cross-site scripting (XSS) vulnerability in complete.php in Simple PHP Scripts blog 0.3 allows remote attackers to inject arbitrary web script or HTML via the id parameter. NOTE:…
- SimplePHPscripts Classified Ads Script HTTP POST Request user.php cross site scripting
- SimplePHPscripts Classified Ads Script URL Parameter preview.php cross site scripting
- SimplePHPscripts GuestBook Script URL Parameter preview.php cross site scripting
- SimplePHPscripts Simple Blog URL Parameter preview.php cross site scripting
- SimplePHPscripts Event Script URL Parameter preview.php cross site scripting
- SimplePHPscripts NewsLetter Script PHP URL Parameter preview.php cross site scripting
- SimplePHPscripts Simple Forum PHP URL Parameter preview.php cross site scripting
- SimplePHPscripts News Script PHP Pro URL Parameter preview.php cross site scripting
- SimplePHPscripts Funeral Script PHP URL Parameter preview.php cross site scripting
- SimplePHPscripts FAQ Script PHP URL Parameter preview.php cross site scripting
- SimplePHPscripts Photo Gallery PHP URL Parameter preview.php cross site scripting
- Simple CMS 2.1 Persistent Cross-Site Scripting via User Input Parameters
- Simple CMS 2.1 Non-Persistent Cross-Site Scripting via Preview Parameter
exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.