CVE-2021-29400

6.5 mediumEPSS 0.6%

Medium (6.5) in netexplorer my smtp contact. EPSS 0.6% chance of exploitation in the next 30 days.

A cross-site request forgery (CSRF) vulnerability in the My SMTP Contact v1.1.1 plugin for GetSimple CMS allows remote attackers to change the SMTP settings of the contact forms for the webpages of the CMS after an authenticated admin visits a malicious third-party site.

Severity

CVSS 3.1

6.5 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 46% of CVEs (scores of 2026-10-31)
CWE: CWE-352
Published: 2021-08-10
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

netexplorer:my_smtp_contact

References

http://get-simple.info/extend/plugin/my-smtp-contact/1221/
http://get-simple.info/extend/plugin/my-smtp-contact/1221/

Check your stack JSON