CVE-2012-6621

no score yetEPSS 1.4%

get-simple getsimple cms: no CVSS score yet. EPSS 1.4% chance of exploitation in the next 30 days.

Multiple cross-site scripting (XSS) vulnerabilities in GetSimple CMS 3.1, 3.1.2, 3.2.3, and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) Email Address or (2) Custom Permalink Structure fields in admin/settings.php; (3) path parameter to admin/upload.php; (4) err parameter to admin/theme.php; (5) error parameter to admin/pages.php; or (6) success or (7) err parameter to admin/index.php.

EPSS: 1.4% chance of exploitation in the next 30 days; higher than 73% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2014-01-16
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

get-simple:getsimple_cms

References

http://packetstormsecurity.com/files/124711
http://packetstormsecurity.org/files/112643/GetSimple-CMS-3.1-Cross-Site-Scripting.html
http://secunia.com/advisories/49137
http://www.securityfocus.com/bid/53501
http://www.vulnerability-lab.com/get_content.php?id=521

Check your stack JSON