CVE-2022-1503
Assigner: VulDB
Published: 2022-04-27T07:50:10
State: PUBLISHED
affected: product: CMS
vendor: GetSimple
versions: status: affected
version: n/a
descriptions: value: A vulnerability, which was classified as problematic, has been found in GetSimple CMS. Affected by this issue is the file /admin/edit.php of the Content Module. The manipulation of the argument post-content with an input like <script>alert(1)</script> leads to cross site scripting. The attack may be launched remotely but requires authentication. Expoit details have been disclosed within the advisory.
metrics: cvssV3_1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 3.5
baseSeverity: LOW
confidentialityImpact: NONE
integrityImpact: LOW
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
version: 3.1
problemTypes: descriptions: cweId: CWE-79
description: CWE-79 Cross Site Scripting
type: CWE
title: GetSimple CMS Content Module edit.php cross site scripting
x_generator: vuldb.com