Medium severity6.3GHSA Advisory· Published May 24, 2024· Updated Apr 15, 2026

CVE-2024-5312

Description

PHP Server Monitor, version 3.2.0, is vulnerable to an XSS via the /phpservermon-3.2.0/vendor/phpmailer/phpmailer/test_script/index.php page in all visible parameters. An attacker could create a specially crafted URL, send it to a victim and retrieve their session details.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
phpservermon/phpservermonPackagist	< 3.3.0	3.3.0

Affected products

Phpservermon/PhpservermonGHSA
Range: <= 3.2.0
ghsa-coords
pkg:composer/phpservermon/phpservermon
Range: < 3.3.0

Patches

Vulnerability mechanics

References

github.com/advisories/GHSA-rq7f-j68f-mqh3ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2024-5312ghsaADVISORY
github.com/PHPMailer/PHPMailer/commit/ff8718f72225a2e34d918c06a3b2c8cca5af3164ghsaWEB
www.incibe.es/en/incibe-cert/notices/aviso/cross-site-scripting-vulnerability-php-server-monitornvdWEB

News mentions

No linked articles in our index yet.

cvss	0.410
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000