medium6.4
CVE-2021-47919
Simple CMS 2.1 contains a non-persistent cross-site scripting vulnerability in the preview.php file's id parameter.
Impact
Simple CMS 2.1 contains a non-persistent cross-site scripting vulnerability in the preview.php file's id parameter. Attackers can inject malicious script code through a GET request to execute arbitrary scripts and potentially hijack user sessions or perform phishing attacks.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Simplephpscripts | Simple Cms Php | Version 2.1 |