CVE-2021-36601

2021-08-1015:15:08

Google

osv.dev

6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

37.5%

JSON

GetSimpleCMS 3.3.16 contains a cross-site Scripting (XSS) vulnerability, where Function TSL does not filter check settings.php Website URL: “siteURL” parameter.

CPENameOperatorVersion
getsimplecmseq3.3.7
getsimplecmseq3.3.4
getsimplecmseq3.3.8
getsimplecmseq3.2.2
getsimplecmseq3.3.14
getsimplecmseq3.3.16
getsimplecmseq3.2.1
getsimplecmseq3.3.15
getsimplecmseq3.3.6
getsimplecmseq3.2.3

Name	Operator	Version
getsimplecms	eq	3.3.7
getsimplecms	eq	3.3.4
getsimplecms	eq	3.3.8
getsimplecms	eq	3.2.2
getsimplecms	eq	3.3.14
getsimplecms	eq	3.3.16
getsimplecms	eq	3.2.1
getsimplecms	eq	3.3.15
getsimplecms	eq	3.3.6
getsimplecms	eq	3.2.3