CVE-2020-24861

Name of the Vulnerable Software and Affected Versions GetSimple CMS version 3.3.16

Description The issue concerns a persistent Cross Site Scripting (XSS) flaw. It occurs through the permalink parameter on the Settings page. The XSS is executed when creating and opening a new page.

Recommendations For GetSimple CMS version 3.3.16, update to a newer version that contains a fix for this issue. As a temporary workaround, consider restricting access to the Settings page to minimize the risk of exploitation. Avoid using the permalink parameter in the affected Settings page until the issue is resolved.