CVE-2020-24861

5.4 mediumEPSS 0.9%

Medium (5.4) in get-simple getsimple cms. EPSS 0.9% chance of exploitation in the next 30 days.

GetSimple CMS 3.3.16 allows in parameter 'permalink' on the Settings page persistent Cross Site Scripting which is executed when you create and open a new page

Severity

CVSS 3.1

5.4 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.9% chance of exploitation in the next 30 days; higher than 59% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2020-10-01
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

get-simple:getsimple_cms

References

http://get-simple.info
https://www.exploit-db.com/exploits/48850
https://www.youtube.com/watch?v=8IMfD5KGt_U
http://get-simple.info
https://www.exploit-db.com/exploits/48850

Check your stack JSON