CVE-2023-39518

MediumCVSS 5.4

Published: 08/08/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.41%

32th percentile - higher than 32% of all known CVEs

Summary

The social-media-skeleton project, implemented using PHP, MySQL, CSS, JavaScript, and HTML, has a stored XSS vulnerability in versions 1.0.0 to 1.0.3. The issue is patched in version 1.0.3.

Risk Assessment

Exploitation of this vulnerability could lead to user data theft or account takeover. Organizations should be aware of the risks associated with outdated software versions.

Recommendation

It is recommended to upgrade to version 1.0.3 or later to eliminate this vulnerability. Regularly reviewing and updating software is crucial for security.

Original NVD description (English source)

social-media-skeleton is an uncompleted social media project implemented using PHP, MySQL, CSS, JavaScript, and HTML. Versions 1.0.0 until 1.0.3 have a stored cross-site scripting vulnerability. The problem is patched in v1.0.3.