Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2024-05637
HistoryJan 24, 2024 - 12:00 a.m.

Stupid Simple CMS Cross-Site Scripting Vulnerability

2024-01-2400:00:00
China National Vulnerability Database
www.cnvd.org.cn
9
cms
cross-site scripting
vulnerability
filtering
user-supplied data
attacker
web script
html
payload
exploitation

6.3 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.1%

Stupid Simple CMS is a content management system. Stupid Simple CMS suffers from a cross-site scripting vulnerability that stems from the application’s lack of effective filtering and escaping of user-supplied data, which can be exploited by an attacker to execute arbitrary web script or HTML by injecting a crafted payload.

6.3 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.1%

Related for CNVD-2024-05637