CVE-2021-47830

5.1 mediumEPSS 0.4%

Medium (5.1) in get-simple getsimplecms. EPSS 0.4% chance of exploitation in the next 30 days.

GetSimple CMS My SMTP Contact Plugin 1.1.1 contains a cross-site request forgery (CSRF) vulnerability. Attackers can craft a malicious webpage that, when visited by an authenticated administrator, can change SMTP configuration settings in the plugin. This may allow unauthorized changes but does not directly enable remote code execution.

Severity

CVSS 4.0

5.1 medium

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N

CVSS 3.1

6.5 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 33% of CVEs (scores of 2026-10-31)
CWE: CWE-352
Published: 2026-01-21
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

get-simple:getsimplecms

References

http://get-simple.info
https://github.com/GetSimpleCMS/GetSimpleCMS
https://www.exploit-db.com/exploits/49774
https://www.exploit-db.com/exploits/49798
https://www.vulncheck.com/advisories/getsimple-cms-my-smtp-contact-plugin-csrf

Check your stack JSON