CVE-2010-4863: XSS

Published Oct 5, 2011

Updated

Cross-site scripting (XSS) vulnerability in admin/changedata.php in GetSimple CMS 2.01 allows remote attackers to inject arbitrary web script or HTML via the post-title parameter.

Affected Software

1 affected component

Get-simple Getsimple Cms=2.01

Event History

Oct 5, 2011

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2010-4863?

CVE-2010-4863 is classified as a medium severity vulnerability due to the potential for cross-site scripting attacks.

How do I fix CVE-2010-4863?

To fix CVE-2010-4863, upgrade to a patched version of GetSimple CMS that resolves the XSS vulnerability.

What impact does CVE-2010-4863 have on my system?

CVE-2010-4863 allows remote attackers to inject malicious scripts into the web page, potentially compromising the security of the site and its users.

Which versions of GetSimple CMS are affected by CVE-2010-4863?

CVE-2010-4863 affects GetSimple CMS version 2.01 specifically.

How can I identify if my system is vulnerable to CVE-2010-4863?

You can identify vulnerability to CVE-2010-4863 by checking if your installation of GetSimple CMS is version 2.01 and testing for the post-title parameter injection.