CVE-2020-18659

Cross Site Scripting vulnerability in GetSimpleCMS =3.3.15 via the 1 sitename, 2 username, and 3 email parameters to /admin/setup.php...

CVE-2020-18659

CVE-2020-18659 affects GetSimpleCMS up to version 3.3.15. A stored/ reflected cross-site scripting vulnerability exists in the admin setup page: /admin/setup.php accepts user-controlled values for sitename, username, and email, enabling XSS. Connected sources consistently describe GetSimpleCMS