CVE-2012-6621: XSS
Multiple cross-site scripting (XSS) vulnerabilities in GetSimple CMS 3.1, 3.1.2, 3.2.3, and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) Email Address or (2) Custom Permalink Structure fields in admin/settings.php; (3) path parameter to admin/upload.php; (4) err parameter to admin/theme.php; (5) error parameter to admin/pages.php; or (6) success or (7) err parameter to admin/index.php.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-6621?
CVE-2012-6621 has a medium severity rating due to its potential for cross-site scripting attacks.
How do I fix CVE-2012-6621?
To fix CVE-2012-6621, update GetSimple CMS to version 3.2.4 or later, which addresses these vulnerabilities.
What are the affected versions in CVE-2012-6621?
CVE-2012-6621 affects GetSimple CMS versions 3.1, 3.1.2, 3.2.3, and earlier.
Can I still use GetSimple CMS if it's affected by CVE-2012-6621?
Using an affected version of GetSimple CMS is risky; upgrading to a patched version is highly recommended.
What types of attacks are possible with CVE-2012-6621?
CVE-2012-6621 allows remote attackers to execute arbitrary JavaScript code through cross-site scripting.