← volver
CVE-2022-1503

GetSimple CMS Content Module edit.php cross site scripting

CVSS 3.5 LOWEPSS 0.6%CWE-79
A vulnerability, which was classified as problematic, has been found in GetSimple CMS. Affected by this issue is the file /admin/edit.php of the Content Module. The manipulation of the argument post-content with an input like <script>alert(1)</script> leads to cross site scripting. The attack may be launched remotely but requires authentication. Expoit details have been disclosed within the advisory.
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
Productos afectados
GetSimple · CMS

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →