Skip to content
OpenAdvisories

Product · Simplephpscripts

Simple CMS

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.4
    CVE-2021-47917

    Simple CMS 2.1 Persistent Cross-Site Scripting via User Input Parameters

    Simple CMS 2.1 contains a persistent cross-site scripting vulnerability in user input parameters that allows remote attackers to inject malicious script code. Attackers can exploit the newUser and editUser modules to inject persistent scripts that execute on …

    Simplephpscripts Simple CMS
  • Medium 6.4
    CVE-2021-47919

    Simple CMS 2.1 Non-Persistent Cross-Site Scripting via Preview Parameter

    Simple CMS 2.1 contains a non-persistent cross-site scripting vulnerability in the preview.php file's id parameter. Attackers can inject malicious script code through a GET request to execute arbitrary scripts and potentially hijack user sessions or perform p…

    Simplephpscripts Simple CMS