CVE-2018-16325: XSS
First published: Sat Sep 01 2018(Updated: )
There is XSS in GetSimple CMS 3.4.0.9 via the admin/edit.php title field.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Get-simple Getsimple Cms | =3.4.0.9 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this XSS vulnerability?
The vulnerability ID for this XSS vulnerability is CVE-2018-16325.
What is the affected software version?
The affected software version is GetSimple CMS 3.4.0.9.
How severe is this vulnerability?
This vulnerability has a severity rating of 6.1, which is considered medium.
How can an attacker exploit this vulnerability?
An attacker can exploit this vulnerability by injecting malicious script code into the title field on the admin/edit.php page of the GetSimple CMS.
Is there a fix available for this vulnerability?
Yes, the fix for this vulnerability is available in the latest version of GetSimple CMS. It is recommended to update to the latest version to mitigate the risk.
- collector/nvd-index
- agent/weakness
- agent/references
- agent/severity
- agent/author
- agent/type
- agent/event
- agent/description
- agent/softwarecombine
- agent/first-publish-date
- agent/last-modified-date
- agent/remedy
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/get-simple
- canonical/get-simple getsimple cms
- version/get-simple getsimple cms/3.4.0.9