Phpjabbers Simple CMS vulnerabilities

2 CVEs affecting Phpjabbers Simple CMS, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-53927, published 2025-12-17.

More from Phpjabbers.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2023-53926, published 2025-12-17. Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days. PHPJabbers Simple CMS 5.0 contains a SQL injection vulnerability in the 'column' parameter that allows remote attackers to manipulate database queries. Attackers can inject crafted SQL payloads…
• CVE-2023-53927, published 2025-12-17. Medium severity, CVSS 5.4. EPSS: 0.3% chance of exploitation in the next 30 days. PHPJabbers Simple CMS 5.0 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts through section name parameters. Attackers can create…