CVE-2012-6621 - CVE House
Back to Database
Status published Medium CVE-2012-6621

Multiple cross-site scripting (XSS) vulnerabilities in GetSimple CMS 3.1, 3.1.2,...

Vulnerability Description

Multiple cross-site scripting (XSS) vulnerabilities in GetSimple CMS 3.1, 3.1.2, 3.2.3, and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) Email Address or (2) Custom Permalink Structure fields in admin/settings.php; (3) path parameter to admin/upload.php; (4) err parameter to admin/theme.php; (5) error parameter to admin/pages.php; or (6) success or (7) err parameter to admin/index.php.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2012-6621

Credits & Attribution

No credits recorded in the NVD database.

References

More from get-simple

View All →
CVE-2022-41544
GetSimple CMS v3.3.16 was discovered to contain a remote code...
Unknown 0
CVE-2021-36601
GetSimpleCMS 3.3.16 contains a cross-site Scripting (XSS) vulnerability, where Function...
Medium 6.1
CVE-2021-28977
Cross Site Scripting vulnerability in GetSimpleCMS 3.3.16 in admin/upload.php by...
Medium 4.8
CVE-2021-28976
Remote Code Execution vulnerability in GetSimpleCMS before 3.3.16 in admin/upload.php...
High 7.2
CVE-2020-24861
GetSimple CMS 3.3.16 allows in parameter 'permalink' on the Settings...
Medium 5.4

Affected Vendor

Affected Software

getsimple cms
Vulnerable Versions:
0, 1.0, 1.1, 1.2, 1.3, 1.4, 1.5, 1.6, 1.7, 1.25, 1.71, 2.0, 2.01, 2.03, 2.03.1, 3.0, 3.1, 3.1.1, 3.1.2, 3.2, 3.2.1, 3.2.2

Timeline

Official Publish: January 16th, 2014
Last Modified: August 6th, 2024
Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.