CVE-2023-46040

2023-10-3100:00:00

mitre

www.cve.org

cross site scripting

getsimplecms

remote attack

6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

20.6%

JSON

Cross Site Scripting vulnerability in GetSimpleCMS v.3.4.0a allows a remote attacker to execute arbitrary code via the a crafted payload to the components.php function.

References

github.com/Num-Nine/CVE/wiki/GetSimplecms-exists-to-store-xss