CVE-2021-47919 — Simple CMS 2.1 Non-Persistent Cross-Site Scripting via Preview Parameter
Simple CMS 2.1 contains a non-persistent cross-site scripting vulnerability in the preview.php file's id parameter. Attackers can inject malicious script code through a GET requ…
Published: 2026-02-01 · CVSS: 5.1 · CVSS 4.0
Simple CMS 2.1 contains a non-persistent cross-site scripting vulnerability in the preview.php file's id parameter. Attackers can inject malicious script code through a GET request to execute arbitrary scripts and potentially hijack user sessions or perform phishing attacks.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7