Skip to content

CVE-2018-9173 Cross-site scripting (XSS) vulnerability in admin/template/js/uploadify/uploadify.swf in GetSimple CMS 3.3.13 allows remote attackers to inject arbitrary web script or HTML, as demonstrated by the mov...

MediumCVSS 6.1 EPSS 2.4%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

Cross-site scripting (XSS) vulnerability in admin/template/js/uploadify/uploadify.swf in GetSimple CMS 3.3.13 allows remote attackers to inject arbitrary web script or HTML, as demonstrated by the movieName parameter.

Affected products

ProductAffected versionsFixed in
get-simple getsimple cms = 3.3.13 No fix listed

References

  • github.com issue-tracking third-party-advisory
  • 44408 exploit third-party-advisory vdb-entry