218 matches found
CVE-2020-18660
GetSimpleCMS =3.3.15 has an open redirect in admin/changedata.php via the redirect function to the url parameter...
CVE-2020-18660
GetSimpleCMS =3.3.15 has an open redirect in admin/changedata.php via the redirect function to the url parameter...
Open redirect
GetSimpleCMS =3.3.15 has an open redirect in admin/changedata.php via the redirect function to the url parameter...
CVE-2020-18660
GetSimpleCMS =3.3.15 has an open redirect in admin/changedata.php via the redirect function to the url parameter...
CVE-2020-18660
GetSimpleCMS =3.3.15 has an open redirect in admin/changedata.php via the redirect function to the url parameter...
CVE-2020-18660
GetSimpleCMS
CVE-2020-18658
Cross Site Scriptiong XSS vulnerability in GetSimpleCMS =3.3.15 via the timezone parameter to settings.php...
CVE-2020-18657
Cross Site Scripting XSS vulnerability in GetSimpleCMS = 3.3.15 in admin/changedata.php via the redirecturl parameter and the headerssent function...
CVE-2020-18659
Cross Site Scripting vulnerability in GetSimpleCMS =3.3.15 via the 1 sitename, 2 username, and 3 email parameters to /admin/setup.php...
CVE-2020-18658
Cross Site Scriptiong XSS vulnerability in GetSimpleCMS =3.3.15 via the timezone parameter to settings.php...
CVE-2020-18659
Cross Site Scripting vulnerability in GetSimpleCMS =3.3.15 via the 1 sitename, 2 username, and 3 email parameters to /admin/setup.php...
CVE-2020-18657
Cross Site Scripting XSS vulnerability in GetSimpleCMS = 3.3.15 in admin/changedata.php via the redirecturl parameter and the headerssent function...
Cross site scripting
Cross Site Scriptiong XSS vulnerability in GetSimpleCMS =3.3.15 via the timezone parameter to settings.php...
Cross site scripting
Cross Site Scripting XSS vulnerability in GetSimpleCMS = 3.3.15 in admin/changedata.php via the redirecturl parameter and the headerssent function...
Cross site scripting
Cross Site Scripting vulnerability in GetSimpleCMS =3.3.15 via the 1 sitename, 2 username, and 3 email parameters to /admin/setup.php...
CVE-2020-18659
Cross Site Scripting vulnerability in GetSimpleCMS =3.3.15 via the 1 sitename, 2 username, and 3 email parameters to /admin/setup.php...
CVE-2020-18659
CVE-2020-18659 affects GetSimpleCMS up to version 3.3.15. A stored/ reflected cross-site scripting vulnerability exists in the admin setup page: /admin/setup.php accepts user-controlled values for sitename, username, and email, enabling XSS. Connected sources consistently describe GetSimpleCMS
CVE-2020-18659
Cross Site Scripting vulnerability in GetSimpleCMS =3.3.15 via the 1 sitename, 2 username, and 3 email parameters to /admin/setup.php...