PT-2026-5564 · Unknown · Simple-Cms

CVE-2021-47919 · Publicado 2026-02-01 · Atualizado 2026-02-01

Positive Technologies (AI Summary)

CVSS v3.1

6.4

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Simple CMS version 2.1

Description The software contains a non-persistent cross-site scripting issue in the preview.php file. The id parameter is susceptible to malicious script injection through a GET request, potentially allowing attackers to execute arbitrary scripts, hijack user sessions, or conduct phishing attacks. The vulnerable parameter is id.

Recommendations Apply necessary input validation and sanitization to the id parameter in the preview.php file.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2021-47919

Produtos afetados

Simple-Cms

Referências · 8

• 🔥 https://vulnerability-lab.com/get_content.php?id=2301 · Exploit
• https://t.me/cveNotify/150507 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2021-47919 · Nota de Segurança
• https://vulncheck.com/advisories/simple-cms-non-persistent-cross-site-scripting-via-preview-parameter · Nota
• https://t.me/CVEtracker/43415 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2021-47919 · Aviso do Fabricante
• https://simplephpscripts.com/simple-cms-php · Nota
• https://twitter.com/CVEnew/status/2017954078459076959 · Publicação no Twitter