Medium severity5.4OSV Advisory· Published Aug 8, 2023· Updated Jun 17, 2026

CVE-2023-39518

Description

social-media-skeleton is an uncompleted social media project implemented using PHP, MySQL, CSS, JavaScript, and HTML. Versions 1.0.0 until 1.0.3 have a stored cross-site scripting vulnerability. The problem is patched in v1.0.3.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Fobybus/Social Media SkeletonOSV
Range: v1.0.1, v1.0.2
GitHub/social-media-skeletonllm-create
Range: <=1.0.3
Social Media Skeleton/social media skeletonllm-fuzzy
Range: <=1.0.3

Patches

Vulnerability mechanics

References

github.com/fobybus/social-media-skeleton/commit/6765d1109016e1f1d707ef47917927c7704e6428nvdPatch
github.com/fobybus/social-media-skeleton/pull/4nvdPatch
github.com/fobybus/social-media-skeleton/security/advisories/GHSA-2jxx-r967-f76pnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.351
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000