Cross site scripting

2023-10-3102:15:00

PRIOn knowledge base

www.prio-n.com

cross site scripting

getsimplecms

vulnerability

remote attacker

arbitrary code

components.php function

nvd

5.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

20.6%

JSON

Cross Site Scripting vulnerability in GetSimpleCMS v.3.4.0a allows a remote attacker to execute arbitrary code via the a crafted payload to the components.php function.

CPENameOperatorVersion
getsimplecmseq3.4.0 alpha1

CPE	Name	Operator	Version
	getsimplecms	eq	3.4.0 alpha1

References

github.com/Num-Nine/CVE/wiki/GetSimplecms-exists-to-store-xss