CVE-2023-46040: XSS

Published Oct 31, 2023

Updated

Cross Site Scripting vulnerability in GetSimpleCMS v.3.4.0a allows a remote attacker to execute arbitrary code via the a crafted payload to the components.php function.

Affected Software

1 affected component

Get-simple Getsimplecms=3.4.0-alpha1

Event History

Oct 31, 2023

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·02:15 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is CVE-2023-46040?

CVE-2023-46040 is a cross-site scripting (XSS) vulnerability in GetSimpleCMS v.3.4.0a that allows a remote attacker to execute arbitrary code.

How does CVE-2023-46040 impact GetSimpleCMS?

CVE-2023-46040 allows a remote attacker to execute arbitrary code by providing a crafted payload to the components.php function.

What is the severity of CVE-2023-46040?

CVE-2023-46040 has a severity level of medium, with a CVSS score of 5.4.

How can I fix CVE-2023-46040 in GetSimpleCMS?

To fix CVE-2023-46040, you should update GetSimpleCMS to a version that is not affected by this vulnerability.

Where can I find more information about CVE-2023-46040?

You can find more information about CVE-2023-46040 in the GitHub repository at the following link: https://github.com/Num-Nine/CVE/wiki/GetSimplecms-exists-to-store-xss