CVE-2010-4513

no score yetEPSS 1.8%

zimplit zimplit cms: no CVSS score yet. EPSS 1.8% chance of exploitation in the next 30 days.

Multiple cross-site scripting (XSS) vulnerabilities in Zimplit CMS 3.0, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the (1) file parameter in a load action to zimplit.php and (2) client parameter to English_manual_version_2.php.

EPSS: 1.8% chance of exploitation in the next 30 days; higher than 78% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2010-12-09
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

zimplit:zimplit_cms

References

http://marc.info/?l=bugtraq&m=129182251500541&w=2
http://packetstormsecurity.org/files/view/96466/zimplit-xss.txt
http://secunia.com/advisories/41629
http://www.htbridge.ch/advisory/xss_vulnerability_in_zimplit_cms.html
http://www.htbridge.ch/advisory/xss_vulnerability_in_zimplit_cms_1.html

Check your stack JSON