Lucene search

K
prionPRIOn knowledge basePRION:CVE-2013-7243
HistoryJan 17, 2014 - 3:18 p.m.

Cross site scripting

2014-01-1715:18:00
PRIOn knowledge base
www.prio-n.com
3

5.8 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

66.4%

Multiple cross-site scripting (XSS) vulnerabilities in GetSimple CMS 3.1.2 and 3.2.3 allow remote attackers to inject arbitrary web script or HTML via the (1) post-menu field to edit.php or (2) Display name field to settings.php. NOTE: The Custom Permalink Structure and Email Address fields are already covered by CVE-2012-6621.

CPENameOperatorVersion
getsimple_cmseq3.1.2
getsimple_cmseq3.2.3

5.8 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

66.4%