CVE-2023-53926

8.7 highEPSS 0.6%

High (8.7) in phpjabbers simple cms. EPSS 0.6% chance of exploitation in the next 30 days.

PHPJabbers Simple CMS 5.0 contains a SQL injection vulnerability in the 'column' parameter that allows remote attackers to manipulate database queries. Attackers can inject crafted SQL payloads through the 'column' parameter in the index.php endpoint to potentially extract or modify database information.

Severity

CVSS 4.0

8.7 high

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 49% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2025-12-17
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

phpjabbers:simple_cms

References

https://www.exploit-db.com/exploits/51416
https://www.phpjabbers.com/faq.php
https://www.vulncheck.com/advisories/phpjabbers-simple-cms-sql-injection-via-column-parameter

Check your stack JSON