CVE-2020-24861

CVE-2020-24861

EPSS 0.9%

GetSimple CMS 3.3.16 allows in parameter 'permalink' on the Settings page persistent Cross Site Scripting which is executed when you create and open a new page

Affected products

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://get-simple.info https://www.exploit-db.com/exploits/48850 https://www.youtube.com/watch?v=8IMfD5KGt_U