S4E just found a high-severity finding from top 10 tcp port service scan
PlatformPlansPartners
Resources
ToolsBlogDocs
Sign Up →
medium·Product Based Web Vulnerabilities·Updated Jan 3, 2024

CVE-2023-30212 Scanner

Detects 'Cross-Site Scripting (XSS)' vulnerability in OURPHP affects v. 7.2.0 and before.

Est. Time~10 seconds
Scan TypeSingle Scan
Targetsurl
CostFree
2.1k
Times Used
continuous scan runs
4.1k
Continuously Checked
assets under CS
0
Vulnerabilities Found
confirmed findings
References
CVECVE-2023-30212
6.1
CVSSmedium
Exploitable remotely over the internet · no authentication required · user interaction needed.

OURPHP <= 7.2.0 is vulnerale to Cross Site Scripting (XSS) via /client/manage/ourphp_out.php.

Attack Vector
Network
Privileges Req.
None
User Interaction
Required
Affected
n/aby n/a
n/a
Updated Aug 22, 2026View on NVD →
Detail

OURPHP is a software tool that facilitates web development and content management. With this product, web developers can easily create dynamic web pages without any programming knowledge. It enables users to manage the content of their websites with ease through a user-friendly interface. This open-source tool has become increasingly popular due to its flexibility and ease of use.

Recently, a serious vulnerability has been detected in OURPHP. The vulnerability code is CVE-2023-30212. The flaw has been identified in the ourphp_out.php feature of the product, which is vulnerable to Cross Site Scripting (XSS). This means that an attacker can inject malicious code into a web page, which will then be executed by any user who visits that page.

This vulnerability can lead to a range of malicious activities, such as identity theft, phishing scams, and unauthorized access to sensitive information. It can lead to data breaches and the exploitation of user credentials. Attackers can steal vital information like credit card details, social security numbers, and login credentials, making users vulnerable to identity theft and financial losses.

In conclusion, OURPHP is a popular software tool that enables web developers to build dynamic web pages with ease. However, the vulnerability detected in the product, CVE-2023-30212, poses a significant threat to user security. By taking appropriate precautions like upgrading to the latest version of OURPHP and scanning the website for vulnerabilities using security tools like s4e.io, users can avoid potential security risks and protect their digital assets. With s4e.io, users can stay informed about potential vulnerabilities in their digital assets and easily rectify them before catastrophic incidents occur.

 

REFERENCES

Solution Advice

To protect against this vulnerability, users of OURPHP should follow these precautions:

  • Upgrade to the latest version of OURPHP. The vulnerability has been fixed in versions 7.2.1 and later.
  • Regularly scan websites for vulnerabilities using security tools like SecurityForEveryone.com.
  • Be cautious when visiting websites, especially those that request personal information.
  • Implement input validation and sanitization measures to avoid XSS attacks.

Get AI-powered remediation steps tailored to your asset.

Try AI Solutions →

Check your infrastructure.
Right now.

11,000+ scanners. Free to start. No credit card required.