CVE-2021-28977

2021-06-2313:15:08

Google

osv.dev

6.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

22.9%

JSON

Cross Site Scripting vulnerability in GetSimpleCMS 3.3.16 in admin/upload.php by adding comments or jpg and other file header information to the content of xla, pages, and gzip files,

CPENameOperatorVersion
getsimplecmseq3.3.7
getsimplecmseq3.3.4
getsimplecmseq3.3.8
getsimplecmseq3.2.2
getsimplecmseq3.3.14
getsimplecmseq3.2.1
getsimplecmseq3.3.15
getsimplecmseq3.3.6
getsimplecmseq3.2.3
getsimplecmseq3.3.14b1

Name	Operator	Version
getsimplecms	eq	3.3.7
getsimplecms	eq	3.3.4
getsimplecms	eq	3.3.8
getsimplecms	eq	3.2.2
getsimplecms	eq	3.3.14
getsimplecms	eq	3.2.1
getsimplecms	eq	3.3.15
getsimplecms	eq	3.3.6
getsimplecms	eq	3.2.3
getsimplecms	eq	3.3.14b1