First published: Wed Nov 23 2011(Updated: )
Cross-site scripting (XSS) vulnerability in admin/components.php in GetSimple CMS 2.01 allows remote attackers to inject arbitrary web script or HTML via the val[] parameter.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
GetSimple CMS | =2.01 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2010-5052 is classified as a medium severity vulnerability due to its potential for cross-site scripting attacks.
To fix CVE-2010-5052, you should upgrade to a version of GetSimple CMS that is newer than 2.01 and has addressed this vulnerability.
Exploitation of CVE-2010-5052 can allow attackers to inject malicious scripts into web pages viewed by other users, compromising their data.
Users of GetSimple CMS version 2.01 are primarily affected by CVE-2010-5052.
A possible workaround for CVE-2010-5052 is to sanitize and validate user inputs for the val[] parameter to reduce XSS risks.