CVE-2021-36601
GetSimpleCMS 3.3.16 contains a cross-site Scripting (XSS) vulnerability, where Function TSL does not filter check settings.php Website URL: "siteURL" parameter.
- Score
- CVSS 3.1 6.1 Medium
- Status
- Modified - cve@mitre.org
- Published
- 2021-08-10
- Last modified
- 2024-08-04
- Weaknesses
- CWE-79
Affected products
References
- https://github.com/kk98kk0/exploit/blob/dbd10a47b0585ba4c673c952a280d502294cdbf4/GetSimpleCMS-3.3.16-xss.md
