CVE-2020-24861

PoC ×2—

CVSS 3.1

5.4 medium

EPSS

<1%p57

Published

Oct 1, 2020 (Oct 1, 2020)

Modified

Jun 17, 2026

Description

GetSimple CMS 3.3.16 allows in parameter 'permalink' on the Settings page persistent Cross Site Scripting which is executed when you create and open a new page

Vendors: get-simple
Products: getsimple cms
Weakness: CWE-79
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.9%)

In the news0 stories

No ingested article mentions this CVE yet.