CVE-2021-47917: Simple CMS 2.1 Persistent Cross-Site Scripting via User Input Parameters
Simple CMS 2.1 contains a persistent cross-site scripting vulnerability in user input parameters that allows remote attackers to inject malicious script code. Attackers can exploit the newUser and editUser modules to inject persistent scripts that execute on user list preview, potentially leading to session hijacking and application manipulation.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-47917?
CVE-2021-47917 has a moderate severity level due to its ability to allow persistent cross-site scripting through user input.
How do I fix CVE-2021-47917?
To fix CVE-2021-47917, implement input validation and sanitization on user input parameters in the newUser and editUser modules.
Who is affected by CVE-2021-47917?
CVE-2021-47917 affects users of Simple CMS 2.1 that utilize the newUser and editUser functionalities.
What types of attacks can CVE-2021-47917 facilitate?
CVE-2021-47917 can facilitate persistent cross-site scripting attacks, allowing attackers to inject malicious scripts.
Is there a known exploit for CVE-2021-47917?
Yes, there are known exploitation methods for CVE-2021-47917 that can be utilized via the affected user input parameters.