CVE-2023-39518
Medium
Description
social-media-skeleton is an uncompleted social media project implemented using PHP, MySQL, CSS, JavaScript, and HTML. Versions 1.0.0 until 1.0.3 have a stored cross-site scripting vulnerability. The problem is patched in v1.0.3.
SeverityMedium
CVSS5.4
Exploit probability—
ProductFobybus Social-media-skeleton
PublishedAug 8, 2023
First seenAug 8, 2023
Weakness typeCWE-79Cross-site scripting (XSS)
How to fix
Update
- fobybus social-media-skeleton1.0.3 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| fobybus social-media-skeleton | v < 1.0.3 | 1.0.3 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.