CVE-2013-7243: XSS
Multiple cross-site scripting (XSS) vulnerabilities in GetSimple CMS 3.1.2 and 3.2.3 allow remote attackers to inject arbitrary web script or HTML via the (1) post-menu field to edit.php or (2) Display name field to settings.php. NOTE: The Custom Permalink Structure and Email Address fields are already covered by CVE-2012-6621.
Affected Software
Event History
Frequently Asked Questions
What are the impacts of CVE-2013-7243?
CVE-2013-7243 allows remote attackers to inject arbitrary web scripts or HTML into affected GetSimple CMS installations.
Which versions of GetSimple CMS are affected by CVE-2013-7243?
CVE-2013-7243 specifically affects GetSimple CMS versions 3.1.2 and 3.2.3.
How can I mitigate the risks associated with CVE-2013-7243?
Mitigation for CVE-2013-7243 involves updating to a patched version of GetSimple CMS that is not vulnerable to these XSS attacks.
What types of cross-site scripting vulnerabilities does CVE-2013-7243 contain?
CVE-2013-7243 contains multiple cross-site scripting vulnerabilities that can be exploited through the post-menu and display name fields.
Is there a specific fix for CVE-2013-7243?
The specific fix for CVE-2013-7243 requires updating to a secure version of GetSimple CMS that addresses these vulnerabilities.