Description
Simple CMS 2.1 contains a non-persistent cross-site scripting vulnerability in the preview.php file's id parameter. Attackers can inject malicious script code through a GET request to execute arbitrary scripts and potentially hijack user sessions or perform phishing attacks.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Simplephpscripts | Simple CMS | 2.1 | — |
References
- Vulnerability Lab Advisory exploit
- Product Homepage product
- VulnCheck Advisory: Simple CMS 2.1 Non-Persistent Cross-Site Scripting via Preview Parameter third-party-advisory