packagist package report

Is phpjabbers/simple_cms safe?

2 known vulnerabilities, worst severity CRITICAL.

cvss

8.7

how bad it is if exploited, out of 10

epss

0.60%

chance of exploitation in the next 30 days

xyz score

4.4

CyberXYZ composite, out of 10

fig. 01 — CVE-2023-53926, the advisory selected below

// advisories

CVE-2023-53926

CRITICAL

PHPJabbers Simple CMS 5.0 contains a SQL injection vulnerability in the 'column' parameter that allows remote attackers to manipulate database queries. Attackers can inject crafted SQL payloads through the 'column' parameter in the index.php endpoint to potentially extract or modify database information.

Affected: not stated
Fixed in: not stated
Weakness: CWE-89
Published: 2025-12-17
Source: NVD

NVD MITRE reference reference reference

// dependencies

0 direct

// ai model usage

Tracked for PyPI packages. HuggingFace models declare Python dependencies, so packagist packages are not covered.

Checked 2026-09-22 at 01:44 UTC. The most recent advisory here was published 2025-12-17. Updated continuously from NVD, GHSA, OSV and CNA feeds.

Is phpjabbers/simple_cms safe? packagist package security report | CyberXYZ