Description
An issue was discovered in GetSimple CMS 3.3.15. An administrator can insert stored XSS via the admin/settings.php Custom Permalink Structure parameter, which injects the XSS payload into any page created at the admin/pages.php URI.
Unscored
CVE-2018-17835
EUVD-2018-9581GHSA-vwv6-58gf-r7wp
An issue was discovered in GetSimple CMS 3.3.15. An administrator can insert stored XSS via the admin/settings.php Custom Permalink Structu…
Published Oct 1, 2018 · Updated Aug 5, 2024 · Assigned by mitre