Skip to content
OpenAdvisories

Product · GetSimple CMS

Custom JS Plugin

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 5.3

    GetSimple CMS Custom JS 0.1 - CSRF to XSS to RCE

    GetSimple CMS Custom JS 0.1 plugin contains a cross-site request forgery vulnerability that allows unauthenticated attackers to inject arbitrary client-side code into administrator browsers. Attackers can craft a malicious website that triggers a cross-site s…