Getsimple Cms@3.1.2 Security Vulnerabilities and Issues — Getsimple Cms@3.1.2 CVE List

Lucene search

Get-simpleGetsimple Cms3.1.2

4 matches found

CVE•added 2014/01/17 3:18 p.m.•38 views

CVE-2013-7243

Multiple cross-site scripting (XSS) vulnerabilities in GetSimple CMS 3.1.2 and 3.2.3 allow remote attackers to inject arbitrary web script or HTML via the (1) post-menu field to edit.php or (2) Display name field to settings.php. NOTE: The Custom Permalink Structure and Email Address fields are alr...

4.3CVSS5.9AI score0.00475EPSS

CVE•added 2015/01/20 3:59 p.m.•38 views

CVE-2014-8790

XML external entity (XXE) vulnerability in admin/api.php in GetSimple CMS 3.1.1 through 3.3.x before 3.3.5 Beta 1, when in certain configurations, allows remote attackers to read arbitrary files via the data parameter.

5CVSS6.9AI score0.00657EPSS

CVE•added 2014/01/16 9:55 p.m.•36 views

CVE-2012-6621

Multiple cross-site scripting (XSS) vulnerabilities in GetSimple CMS 3.1, 3.1.2, 3.2.3, and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) Email Address or (2) Custom Permalink Structure fields in admin/settings.php; (3) path parameter to admin/upload.php; (4) err...

4.3CVSS5.9AI score0.00475EPSS

CVE•added 2017/06/29 8:29 a.m.•34 views

CVE-2017-10673

admin/profile.php in GetSimple CMS 3.x has XSS in a name field.

6.1CVSS5.9AI score0.0024EPSS