CVE-2021-36601: XSS
Published Aug 10, 2021
·Updated
GetSimpleCMS 3.3.16 contains a cross-site Scripting (XSS) vulnerability, where Function TSL does not filter check settings.php Website URL: "siteURL" parameter.
Affected Software
1 affected component
Get-simple Getsimplecms=3.3.16
Event History
Aug 10, 2021
CVE Published
via MITRE·02:05 PM
Data Sourced
via MITRE·02:05 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2021-36601?
The severity of CVE-2021-36601 is medium.
2
What vulnerability does CVE-2021-36601 have?
CVE-2021-36601 has a cross-site scripting (XSS) vulnerability.
3
Which software versions are affected by CVE-2021-36601?
GetSimpleCMS version 3.3.16 is affected by CVE-2021-36601.
4
How can the XSS vulnerability be exploited in GetSimpleCMS 3.3.16?
The XSS vulnerability in GetSimpleCMS 3.3.16 can be exploited by not filtering the check settings.php Website URL.
5
Is there a fix available for CVE-2021-36601?
There is no specific fix information available for CVE-2021-36601, it is recommended to update to the latest version of GetSimpleCMS.