Security Advisory

CVE-2020-23839

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2020-09-01 16:40:11
Last updated 2024-08-04 15:05:11
Assigner mitre
State PUBLISHED

Description

A Reflected Cross-Site Scripting (XSS) vulnerability in GetSimple CMS v3.3.16, in the admin/index.php login portal webpage, allows remote attackers to execute JavaScript code in the clients browser and harvest login credentials after a client clicks a link, enters credentials, and submits the login form.