CVE-2021-47732: CMSimple 5.2 Stored Cross-Site Scripting via Filebrowser External Input
CMSimple 5.2 contains a stored cross-site scripting vulnerability in the Filebrowser External input field that allows attackers to inject malicious JavaScript. Attackers can place unfiltered JavaScript code that executes when users click on Page or Files tabs, enabling persistent script injection.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-47732?
CVE-2021-47732 is classified as a high severity vulnerability due to its ability to allow stored cross-site scripting attacks.
How do I fix CVE-2021-47732?
To fix CVE-2021-47732, update to the latest version of CMSimple that addresses the stored cross-site scripting vulnerability.
What versions of CMSimple are affected by CVE-2021-47732?
CVE-2021-47732 affects CMSimple version 5.2 and potentially earlier versions.
What attack vector is exploited in CVE-2021-47732?
CVE-2021-47732 exploits the Filebrowser external input field to inject malicious JavaScript code.
What are the potential impacts of CVE-2021-47732 on users?
The potential impacts of CVE-2021-47732 include unauthorized access to user sessions and the spread of malicious content when users interact with affected tabs.