PT-2026-5564 · Unknown · Simple-Cms

Published 2026-02-01 · Updated 2026-02-01 · CVE-2021-47919

Positive Technologies (AI Summary)

CVSS v3.1

6.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Simple CMS version 2.1

Description The software contains a non-persistent cross-site scripting issue in the preview.php file. The id parameter is susceptible to malicious script injection through a GET request, potentially allowing attackers to execute arbitrary scripts, hijack user sessions, or conduct phishing attacks. The vulnerable parameter is id.

Recommendations Apply necessary input validation and sanitization to the id parameter in the preview.php file.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2021-47919

Affected Products

Simple-Cms

References · 8

• 🔥 https://vulnerability-lab.com/get_content.php?id=2301 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2021-47919 · Security Note
• https://osv.dev/vulnerability/CVE-2021-47919 · Vendor Advisory
• https://t.me/cveNotify/150507 · Telegram Post
• https://vulncheck.com/advisories/simple-cms-non-persistent-cross-site-scripting-via-preview-parameter · Note
• https://t.me/CVEtracker/43415 · Telegram Post
• https://simplephpscripts.com/simple-cms-php · Note
• https://twitter.com/CVEnew/status/2017954078459076959 · Twitter Post