medium5.4
CVE-2020-24861
GetSimple CMS 3.3.16 allows in parameter 'permalink' on the Settings page persistent Cross Site Scripting which is executed when you create and open a new page
Impact
GetSimple CMS 3.3.16 allows in parameter 'permalink' on the Settings page persistent Cross Site Scripting which is executed when you create and open a new page
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Get-Simple | Getsimple Cms | Version 3.3.16 |