Getsimple Cms Security Vulnerabilities and Issues — Getsimple Cms CVE List

Lucene search

Get-simpleGetsimple Cms

5 matches found

CVE•added 2020/01/02 9:15 p.m.•92 views

CVE-2013-1420

Multiple cross-site scripting (XSS) vulnerabilities in GetSimple CMS before 3.2.1 allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter to backup-edit.php; (2) title or (3) menu parameter to edit.php; or (4) path or (5) returnid parameter to filebrowser.php in admin...

6.1CVSS5.9AI score0.00475EPSS

CVE•added 2020/09/01 5:15 p.m.•75 views

CVE-2020-23839

A Reflected Cross-Site Scripting (XSS) vulnerability in GetSimple CMS v3.3.16, in the admin/index.php login portal webpage, allows remote attackers to execute JavaScript code in the client's browser and harvest login credentials after a client clicks a link, enters credentials, and submits the logi...

6.1CVSS6AI score0.14038EPSS

CVE•added 2018/04/02 3:29 a.m.•45 views

CVE-2018-9173

Cross-site scripting (XSS) vulnerability in admin/template/js/uploadify/uploadify.swf in GetSimple CMS 3.3.13 allows remote attackers to inject arbitrary web script or HTML, as demonstrated by the movieName parameter.

6.1CVSS5.9AI score0.005EPSS

CVE•added 2018/09/01 10:29 p.m.•36 views

CVE-2018-16325

There is XSS in GetSimple CMS 3.4.0.9 via the admin/edit.php title field.

6.1CVSS5.5AI score0.00223EPSS

CVE•added 2017/06/29 8:29 a.m.•34 views

CVE-2017-10673

admin/profile.php in GetSimple CMS 3.x has XSS in a name field.

6.1CVSS5.9AI score0.0024EPSS