Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2023-86327
HistoryNov 02, 2023 - 12:00 a.m.

GetSimpleCMS Cross-Site Scripting Vulnerability

2023-11-0200:00:00
China National Vulnerability Database
www.cnvd.org.cn
2
getsimplecms
cross-site scripting
vulnerability
remote attacker
code execution

6.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

20.6%

GetSimpleCMS is a content management system for individual developers. A cross-site scripting vulnerability exists in GetSimpleCMS v3.4.0a, which stems from the application’s lack of effective filtering and escaping of user-supplied data, and can be exploited by a remote attacker to execute arbitrary code via the Components.php function using a carefully crafted payload.

6.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

20.6%

Related for CNVD-2023-86327