XSS in Get-simple Getsimple_cms
CVE-2015-5355
Multiple cross-site scripting (XSS) vulnerabilities in GetSimple CMS before 3.3.6 allow remote attackers to inject arbitrary web script or HTML via the (1) post-content or (2) post-title parameter to admin/edit.php.
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.019 (77.6th percentile) — read the EPSS interpretation.
Affected products
- Get-simple Getsimple_cms
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (x_refsource_CONFIRM, Exploit, Vendor Advisory)
- cve@mitre.org (x_refsource_CONFIRM)
- cve@mitre.org (Exploit, x_refsource_MISC)