CVE-2022-1503: GetSimple CMS Content Module edit.php cross site scripting

Published Apr 27, 2022

Updated

A vulnerability, which was classified as problematic, has been found in GetSimple CMS. Affected by this issue is the file /admin/edit.php of the Content Module. The manipulation of the argument post-content with an input like <script>alert(1)</script> leads to cross site scripting. The attack may be launched remotely but requires authentication. Expoit details have been disclosed within the advisory.

Affected Software

1 affected component

Get-simple Getsimple Cms

Event History

Apr 27, 2022

CVE Published

via MITRE·07:50 AM

Data Sourced

via MITRE·07:50 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2022-1503?

The severity of CVE-2022-1503 is medium.

What software is affected by CVE-2022-1503?

GetSimple CMS is affected by CVE-2022-1503.

What is the vulnerability type of CVE-2022-1503?

CVE-2022-1503 is a cross-site scripting (XSS) vulnerability.

How can I exploit CVE-2022-1503?

CVE-2022-1503 can be exploited by manipulating the 'post-content' argument in the file /admin/edit.php of the Content Module with malicious code.

Is there a fix available for CVE-2022-1503?

At the moment, there is no known fix available for CVE-2022-1503. It is recommended to update to the latest version of GetSimple CMS once a fix is released.