Skip to content

GetSimplecms exists to store xss

Num-Nine edited this page Oct 14, 2023 · 3 revisions

0.Open source address:

https://github.com/GetSimpleCMS/GetSimpleCMS

1.GetSimple Version:3.4.0a

2.Download address: https://codeload.github.com/GetSimpleCMS/GetSimpleCMS/zip/refs/heads/master

3.Vulnerability type: Storage xss

4.After installation, open the following address:

/admin/components.php

5.Insert xss code: <script>alert(1)</script>

image-20231009235129201

6.xss is triggered by accessing the foreground image-20231009235157651

Clone this wiki locally