Entreprise française de cybersécurité depuis 2004
☎ 03 60 47 09 81 - info@securiteinfo.com

CVE-2020-24861

Description

GetSimple CMS 3.3.16 allows in parameter 'permalink' on the Settings page persistent Cross Site Scripting which is executed when you create and open a new page

POC

Reference

- https://www.exploit-db.com/exploits/48850

- https://www.youtube.com/watch?v=8IMfD5KGt_U

Github

No PoCs found on GitHub currently.