CVE-2012-6621
Summary
| CVE | CVE-2012-6621 |
|---|---|
| State | PUBLISHED |
| Assigner | mitre |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2014-01-16 21:55:08 UTC |
| Updated | 2026-04-29 01:13:23 UTC |
| Description | Multiple cross-site scripting (XSS) vulnerabilities in GetSimple CMS 3.1, 3.1.2, 3.2.3, and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) Email Address or (2) Custom Permalink Structure fields in admin/settings.php; (3) path parameter to admin/upload.php; (4) err parameter to admin/theme.php; (5) error parameter to admin/pages.php; or (6) success or (7) err parameter to admin/index.php. |
Risk And Classification
Primary CVSS: v2.0 4.3 from [email protected]
AV:N/AC:M/Au:N/C:N/I:P/A:N
EPSS: 0.004750000 probability, percentile 0.649110000 (date 2026-05-03)
Problem Types: CWE-79 | n/a
CVSS v2.0 Breakdown
Access Vector
NetworkAccess Complexity
MediumAuthentication
NoneConfidentiality
NoneIntegrity
PartialAvailability
NoneAV:N/AC:M/Au:N/C:N/I:P/A:N
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Get-simple | Getsimple Cms | 1.0 | All | All | All |
| Application | Get-simple | Getsimple Cms | 1.1 | All | All | All |
| Application | Get-simple | Getsimple Cms | 1.2 | All | All | All |
| Application | Get-simple | Getsimple Cms | 1.25 | All | All | All |
| Application | Get-simple | Getsimple Cms | 1.3 | All | All | All |
| Application | Get-simple | Getsimple Cms | 1.4 | All | All | All |
| Application | Get-simple | Getsimple Cms | 1.5 | All | All | All |
| Application | Get-simple | Getsimple Cms | 1.6 | All | All | All |
| Application | Get-simple | Getsimple Cms | 1.7 | All | All | All |
| Application | Get-simple | Getsimple Cms | 1.71 | All | All | All |
| Application | Get-simple | Getsimple Cms | 2.0 | All | All | All |
| Application | Get-simple | Getsimple Cms | 2.01 | All | All | All |
| Application | Get-simple | Getsimple Cms | 2.03 | All | All | All |
| Application | Get-simple | Getsimple Cms | 2.03.1 | All | All | All |
| Application | Get-simple | Getsimple Cms | 3.0 | All | All | All |
| Application | Get-simple | Getsimple Cms | 3.1 | All | All | All |
| Application | Get-simple | Getsimple Cms | 3.1.1 | All | All | All |
| Application | Get-simple | Getsimple Cms | 3.1.2 | All | All | All |
| Application | Get-simple | Getsimple Cms | 3.2 | All | All | All |
| Application | Get-simple | Getsimple Cms | 3.2.1 | All | All | All |
| Application | Get-simple | Getsimple Cms | 3.2.2 | All | All | All |
| Application | Get-simple | Getsimple Cms | All | All | All | All |
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| GetSimple CMS 3.1 Cross Site Scripting ≈ Packet Storm | af854a3a-2127-422b-91ae-364da2661108 | packetstormsecurity.org | |
| 403 Forbidden | af854a3a-2127-422b-91ae-364da2661108 | www.vulnerability-lab.com | |
| Security Alerts - Secunia | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | Vendor Advisory |
| GetSimple CMS Multiple HTML Injection and Cross Site Scripting Vulnerabilities | af854a3a-2127-422b-91ae-364da2661108 | www.securityfocus.com | |
| IBM X-Force Exchange | af854a3a-2127-422b-91ae-364da2661108 | exchange.xforce.ibmcloud.com | |
| IBM X-Force Exchange | af854a3a-2127-422b-91ae-364da2661108 | exchange.xforce.ibmcloud.com | |
| GetSimple CMS 3.1.2 / 3.2.3 Cross Site Scripting ≈ Packet Storm | af854a3a-2127-422b-91ae-364da2661108 | packetstormsecurity.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.