CVE-2021-47830: GetSimple CMS My SMTP Contact Plugin 1.1.1 - CSRF

Published Jan 21, 2026

Updated

GetSimple CMS My SMTP Contact Plugin 1.1.1 contains a cross-site request forgery (CSRF) vulnerability. Attackers can craft a malicious webpage that, when visited by an authenticated administrator, can change SMTP configuration settings in the plugin. This may allow unauthorized changes but does not directly enable remote code execution.

Affected Software

2 affected components

GetSimple CMS/My SMTP Contact Plugin=1.1.1

Get-simple Getsimplecms=1.1.1

Event History

Jan 21, 2026

CVE Published

via MITRE·05:27 PM

Data Sourced

via MITRE·05:27 PM

DescriptionWeakness

Data Sourced

via NVD·06:16 PM

DescriptionSeverityWeaknessAffected Software

Aug 22, 58235

Event

via NVD·08:57 PM

Frequently Asked Questions

What is the severity of CVE-2021-47830?

CVE-2021-47830 is classified as a medium severity vulnerability due to its potential impact on configuration settings.

How does CVE-2021-47830 exploit work?

CVE-2021-47830 exploits a cross-site request forgery (CSRF) vulnerability that allows attackers to change SMTP configuration settings.

Who is affected by CVE-2021-47830?

CVE-2021-47830 affects users of GetSimple CMS My SMTP Contact Plugin version 1.1.1.

How can I mitigate the risks of CVE-2021-47830?

To mitigate CVE-2021-47830, ensure that CSRF tokens are implemented in the plugin's forms to prevent unauthorized requests.

Is there a patch available for CVE-2021-47830?

As of now, there is no official patch released for CVE-2021-47830, so it is recommended to disable the plugin until a fix is available.