462 matches found
CVE-2020-21353
A stored cross site scripting XSS vulnerability in /admin/snippets.php of GetSimple CMS 3.4.0a allows attackers to execute arbitrary web scripts or HTML via crafted payload in the Edit Snippets module...
CVE-2020-21353
A stored cross site scripting XSS vulnerability in /admin/snippets.php of GetSimple CMS 3.4.0a allows attackers to execute arbitrary web scripts or HTML via crafted payload in the Edit Snippets module...
Cross site scripting
A stored cross site scripting XSS vulnerability in /admin/snippets.php of GetSimple CMS 3.4.0a allows attackers to execute arbitrary web scripts or HTML via crafted payload in the Edit Snippets module...
CVE-2020-21353
A stored cross site scripting XSS vulnerability in /admin/snippets.php of GetSimple CMS 3.4.0a allows attackers to execute arbitrary web scripts or HTML via crafted payload in the Edit Snippets module...
CVE-2020-21353
CVE-2020-21353 affects GetSimple CMS version 3.4.0a. A stored XSS exists in /admin/snippets.php via crafted payload in the Edit Snippets module, enabling execution of arbitrary web scripts/HTML if a user views the crafted content. No exploitation details or fixes are provided in the supplied docu...
GetSimple CMS 跨站脚本漏洞
GetSimple CMS is an XML-based, fully independent and streamlined content management system. /admin/snippets.php in GetSimple CMS version 3.4.0a is vulnerable to a stored cross-site scripting vulnerability, which can be exploited by attackers to execute arbitrary Web scripts or HTML via the Edit...
GetSimple CMS Open Redirect Vulnerability (CNVD-2021-46556)
GetSimple CMS is an XML-based, completely self-contained, streamlined content management system. An open redirect vulnerability exists in admin/changedata.php in GetSimple CMS 3.3.15 and earlier versions. An attacker can redirect a user to a url parameter via the redirect function...
GetSimple CMS Cross-Site Scripting Vulnerability (CNVD-2021-45441)
GetSimple CMS is an XML-based, completely self-contained, streamlined content management system. A cross-site scripting vulnerability exists in GetSimple CMS 3.3.15 and earlier versions. The vulnerability can be exploited to conduct cross-site scripting attacks via the timezone parameter of...
GetSimple CMS Cross-Site Scripting Vulnerability (CNVD-2021-46555)
GetSimple CMS is an XML-based, completely self-contained, streamlined content management system. A cross-site scripting vulnerability exists in admin/changedata.php in GetSimple CMS 3.3.15 and earlier versions. The vulnerability can be exploited to conduct cross-site scripting attacks via the...
GetSimple CMS Cross-Site Scripting Vulnerability
GetSimple CMS is an XML-based, completely self-contained, streamlined content management system. A cross-site scripting vulnerability exists in GetSimple CMS 3.3.15 and earlier versions. The vulnerability can be exploited to conduct cross-site scripting attacks via the sitename, username, and ema...
GetSimple CMS Cross-Site Scripting Vulnerability (CNVD-2021-45144)
GetSimple CMS is an XML-based, completely self-contained, streamlined content management system. A cross-site scripting vulnerability exists in admin/snippets.php in GetSimple CMS version 3.4.0a. An attacker can exploit this vulnerability via Add Snippet and Save snippets to conduct cross-site...
GetSimple CMS Cross-Site Scripting Vulnerability (CNVD-2021-45143)
GetSimple CMS is an XML-based, completely self-contained, streamlined content management system. A cross-site scripting vulnerability exists in admin/edit.php in GetSimple CMS version 3.4.0a. An attacker can exploit this vulnerability to conduct a cross-site scripting attack...
GetSimple CMS Remote Code Execution Vulnerability (CNVD-2021-45301)
GetSimple CMS is an XML-based, completely self-contained, streamlined content management system. A remote code execution vulnerability exists in admin/upload.php in GetSimple CMS versions prior to 3.3.16. An attacker can exploit this vulnerability to achieve remote code execution via phar files...
GetSimple CMS Cross-Site Scripting Vulnerability (CNVD-2021-45142)
GetSimple CMS is an XML-based, completely self-contained, streamlined content management system. A cross-site scripting vulnerability exists in admin/upload.php in GetSimple CMS version 3.3.16. The vulnerability can be exploited to conduct cross-site scripting attacks by adding comments to the...
getsimplecms 跨站脚本漏洞
GetSimple CMS is an XML-based, completely self-contained, streamlined content management system. A cross-site scripting vulnerability exists in GetSimple CMS 3.3.15 and earlier versions. The vulnerability can be exploited to conduct cross-site scripting attacks via the timezone parameter of...
getsimplecms 跨站脚本漏洞
GetSimple CMS is an XML-based, completely self-contained, streamlined content management system. A cross-site scripting vulnerability exists in admin/snippets.php in GetSimple CMS version 3.4.0a. An attacker can exploit this vulnerability via Add Snippet and Save snippets to conduct cross-site...
GetSimpleCMS 输入验证错误漏洞
GetSimple CMS is an XML-based, completely self-contained, streamlined content management system. An open redirect vulnerability exists in admin/changedata.php in GetSimple CMS 3.3.15 and earlier versions. An attacker can redirect a user to a url parameter via the redirect function...
getsimplecms 跨站脚本漏洞
GetSimple CMS is an XML-based, completely self-contained, streamlined content management system. A cross-site scripting vulnerability exists in admin/changedata.php in GetSimple CMS 3.3.15 and earlier versions. The vulnerability can be exploited to conduct cross-site scripting attacks via the...
getsimplecms 跨站脚本漏洞
GetSimple CMS is an XML-based, completely self-contained, streamlined content management system. A cross-site scripting vulnerability exists in admin/edit.php in GetSimple CMS version 3.4.0a. An attacker can exploit this vulnerability to conduct a cross-site scripting attack...
getsimplecms 代码问题漏洞
GetSimple CMS is an XML-based, completely self-contained, streamlined content management system. A remote code execution vulnerability exists in admin/upload.php in GetSimple CMS versions prior to 3.3.16. An attacker can exploit this vulnerability to achieve remote code execution via phar files...