Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

SimplePHPscripts — Vulnerabilities & Security Advisories 14

Browse all 14 CVE security advisories affecting SimplePHPscripts. AI-powered Chinese analysis, POCs, and references for each vulnerability.

SimplePHPscripts develops lightweight PHP web applications for small businesses and personal websites, focusing on content management and e-commerce solutions. Historically, the software has been vulnerable to multiple remote code execution flaws, cross-site scripting (XSS), and privilege escalation vulnerabilities, often stemming from insufficient input validation and insecure authentication mechanisms. With 14 CVEs recorded, these issues have allowed attackers to execute arbitrary code, steal session cookies, and gain unauthorized administrative access. While no major public security incidents have been documented, the consistent pattern of vulnerabilities suggests a need for improved security practices in development and regular patching for deployed instances.

CVE ID Title CVSS Severity Published
CVE-2021-47919 Simple CMS 2.1 Non-Persistent Cross-Site Scripting via Preview Parameter — Simple CMS CWE-79 6.4 Medium 2026-02-01
CVE-2021-47917 Simple CMS 2.1 Persistent Cross-Site Scripting via User Input Parameters — Simple CMS CWE-79 6.4 Medium 2026-02-01
CVE-2021-47918 Simple CMS 2.1 SQL Injection Vulnerability via Users Module — Simple CMS CWE-89 8.1 High 2026-02-01
CVE-2023-3540 SimplePHPscripts NewsLetter Script PHP URL Parameter preview.php cross site scripting — NewsLetter Script PHP CWE-79 3.5 Low 2023-07-07
CVE-2023-3539 SimplePHPscripts Simple Forum PHP URL Parameter preview.php cross site scripting — Simple Forum PHP CWE-79 3.5 Low 2023-07-07
CVE-2023-3538 SimplePHPscripts Photo Gallery PHP URL Parameter preview.php cross site scripting — Photo Gallery PHP CWE-79 3.5 Low 2023-07-07
CVE-2023-3537 SimplePHPscripts News Script PHP Pro URL Parameter preview.php cross site scripting — News Script PHP Pro CWE-79 3.5 Low 2023-07-07
CVE-2023-3536 SimplePHPscripts Funeral Script PHP URL Parameter preview.php cross site scripting — Funeral Script PHP CWE-79 3.5 Low 2023-07-07
CVE-2023-3535 SimplePHPscripts FAQ Script PHP URL Parameter preview.php cross site scripting — FAQ Script PHP CWE-79 3.5 Low 2023-07-07
CVE-2023-3476 SimplePHPscripts GuestBook Script URL Parameter preview.php cross site scripting — GuestBook Script CWE-79 3.5 Low 2023-06-30
CVE-2023-3475 SimplePHPscripts Event Script URL Parameter preview.php cross site scripting — Event Script CWE-79 3.5 Low 2023-06-30
CVE-2023-3474 SimplePHPscripts Simple Blog URL Parameter preview.php cross site scripting — Simple Blog CWE-79 3.5 Low 2023-06-30
CVE-2023-3465 SimplePHPscripts Classified Ads Script HTTP POST Request user.php cross site scripting — Classified Ads Script CWE-79 3.5 Low 2023-06-29
CVE-2023-3464 SimplePHPscripts Classified Ads Script URL Parameter preview.php cross site scripting — Classified Ads Script CWE-79 3.5 Low 2023-06-29

This page lists every published CVE security advisory associated with SimplePHPscripts. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.