GetSimple CMS <= 3.3.16 Multiple XSS Vulnerabilities

GetSimple CMS is prone to multiple cross-site scripting XSS vulnerabilities. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is...

CVE-2021-36601

CVE-2021-36601 affects GetSimpleCMS 3.3.16: an XSS vulnerability exists in the siteURL parameter of admin/settings.php, caused by inadequate filtering (described as Function TSL not filtering the check). Multiple sources (Red Hat, NVD/NVD-variant, OSV, OpenVAS, etc.) corroborate a cross-site scri...