Description (CNA)
Simple CMS 2.1 contains a non-persistent cross-site scripting vulnerability in the preview.php file's id parameter. Attackers can inject malicious script code through a GET request to execute arbitrary scripts and potentially hijack user sessions or perform phishing attacks.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Simplephpscripts / Simple CMS | affected 2.1 |
CWE
CWE-79
References
- https://www.vulnerability-lab.com/get_content.php?id=2301
- https://simplephpscripts.com/simple-cms-php
- https://www.vulncheck.com/advisories/simple-cms-non-persistent-cross-site-scripting-via-preview-parameter
ADP enrichment
No English description supplied.
No references supplied.