CVE-2020-20391

Cross Site Scripting vulnerability in GetSimpleCMS 3.4.0a in admin/snippets.php via 1 Add Snippet and 2 Save snippets...

CVE-2024-7420: Cross-Site Request Forgery (CSRF)

The Insert PHP Code Snippet plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.6. This is due to missing or incorrect nonce validation in the /admin/snippets.php file. This makes it possible for unauthenticated attackers to activate/deactiva...

CVE-2020-21353

A stored cross site scripting XSS vulnerability in /admin/snippets.php of GetSimple CMS 3.4.0a allows attackers to execute arbitrary web scripts or HTML via crafted payload in the Edit Snippets module...

PT-2021-10614

Name of the Vulnerable Software and Affected Versions: GetSimple CMS version 3.4.0a Description: A stored cross site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the Edit Snippets module, specifically targeting the /admin/snippets.php...

CVE-2020-20391

Cross Site Scripting vulnerability in GetSimpleCMS 3.4.0a in admin/snippets.php via 1 Add Snippet and 2 Save snippets...

CVE-2020-20391

Cross Site Scripting vulnerability in GetSimpleCMS 3.4.0a in admin/snippets.php via 1 Add Snippet and 2 Save snippets...

PT-2021-10487

Name of the Vulnerable Software and Affected Versions: GetSimpleCMS version 3.4.0a Description: The issue is related to a Cross Site Scripting vulnerability. It affects the admin/snippets.php file via two specific actions: 1 Add Snippet and 2 Save snippets. Recommendations: For GetSimpleCMS versi...

CVE-2020-20391: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in GetSimpleCMS 3.4.0a in admin/snippets.php via 1 Add Snippet and 2 Save snippets...