Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in GetSimple CMS 3.1.2 and 3.2.3 allow remote attackers to inject arbitrary web script or HTML via the 1 post-menu field to edit.php or 2 Display name field to settings.php. NOTE: The Custom Permalink Structure and Email Address fields are already...

CVE-2012-6621

GetSimple CMS versions 3.1, 3.1.2, 3.2.3 and earlier are affected by multiple cross-site scripting (XSS) vulnerabilities. The issue arises in admin/settings.php (Email Address, Custom Permalink Structure fields), admin/upload.php (path parameter), admin/theme.php (err parameter), admin/pages.php ...