Cross-Site Scripting Vulnerabilities in GetSimple CMS by GetSimple
CVE-2012-6621

Currently unrated

Key Information:

Vendor: Get-simple
Status: Getsimple Cms
Vendor: CVE Published:; 16 January 2014

What is CVE-2012-6621?

Certain versions of GetSimple CMS have multiple cross-site scripting vulnerabilities that allow attackers to inject arbitrary web scripts or HTML. These can be exploited via several input fields in the admin panel, including the Email Address and Custom Permalink Structure fields. Vulnerable paths include admin/upload.php, admin/theme.php, admin/pages.php, and several parameters in admin/index.php. This enables remote attackers to execute malicious scripts, potentially compromising the security of affected installations.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch