A stored cross site scripting (XSS) vulnerability in /admin/snippets.php of GetSimple CMS 3.4.0a allows attackers to execute arbitrary web scripts or HTML via crafted payload in the Edit Snippets module.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-21353
Reference (s):
- https://github.com/GetSimpleCMS/GetSimpleCMS/issues/1319