Vulnerability-Lookup

GHSA-XCF5-JFW6-6364

Vulnerability from github – Published: 2026-01-21 18:30 – Updated: 2026-01-21 18:30

Details

GetSimple CMS My SMTP Contact Plugin 1.1.2 suffers from a Stored Cross-Site Scripting (XSS) vulnerability. The plugin attempts to sanitize user input using htmlspecialchars(), but this can be bypassed by passing dangerous characters as escaped hex bytes. This allows attackers to inject arbitrary client-side code that executes in the administrator's browser when visiting a malicious page.

Severity ?

0.0 (None)


                  
                    CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2021-47870"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-79"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2026-01-21T18:16:19Z",
    "severity": "MODERATE"
  },
  "details": "GetSimple CMS My SMTP Contact Plugin 1.1.2 suffers from a Stored Cross-Site Scripting (XSS) vulnerability. The plugin attempts to sanitize user input using htmlspecialchars(), but this can be bypassed by passing dangerous characters as escaped hex bytes. This allows attackers to inject arbitrary client-side code that executes in the administrator\u0027s browser when visiting a malicious page.",
  "id": "GHSA-xcf5-jfw6-6364",
  "modified": "2026-01-21T18:30:31Z",
  "published": "2026-01-21T18:30:31Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-47870"
    },
    {
      "type": "WEB",
      "url": "https://github.com/GetSimpleCMS/GetSimpleCMS"
    },
    {
      "type": "WEB",
      "url": "https://github.com/boku7/gsSMTP-Csrf2Xss2RCE"
    },
    {
      "type": "WEB",
      "url": "https://www.exploit-db.com/exploits/49798"
    },
    {
      "type": "WEB",
      "url": "https://www.vulncheck.com/advisories/getsimple-cms-my-smtp-contact-plugin-stored-xss"
    },
    {
      "type": "WEB",
      "url": "http://get-simple.info"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
      "type": "CVSS_V4"
    }
  ]
}

CVE-2021-47870 (GCVE-0-2021-47870)

Vulnerability from cvelistv5 – Published: 2026-01-21 17:32 – Updated: 2026-01-22 16:51

Title

GetSimple CMS My SMTP Contact Plugin 1.1.2 - Stored XSS

Summary

Severity ?

5.4 (Medium)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N

CWE

CWE-79 - Improper Neutralization of Input During Web Page Generation ('Stored Cross-site Scripting')

Assigner

VulnCheck

References

URL

Tags

	https://github.com/boku7/gsSMTP-Csrf2Xss2RCE/	technical-descriptionexploit
	http://get-simple.info	product
	https://github.com/GetSimpleCMS/GetSimpleCMS	product
	https://www.exploit-db.com/exploits/49798	exploit
	https://www.vulncheck.com/advisories/getsimple-cm…	third-party-advisory

Impacted products

	Vendor	Product	Version
	GetSimple CMS	My SMTP Contact Plugin	Affected: 1.1.2

Credits

Bobby Cooke (boku)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2021-47870",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-01-22T16:45:29.413116Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-01-22T16:51:05.377Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "My SMTP Contact Plugin",
          "vendor": "GetSimple CMS",
          "versions": [
            {
              "status": "affected",
              "version": "1.1.2"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Bobby Cooke (boku)"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "GetSimple CMS My SMTP Contact Plugin 1.1.2 suffers from a Stored Cross-Site Scripting (XSS) vulnerability. The plugin attempts to sanitize user input using htmlspecialchars(), but this can be bypassed by passing dangerous characters as escaped hex bytes. This allows attackers to inject arbitrary client-side code that executes in the administrator\u0027s browser when visiting a malicious page."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 5.4,
            "baseSeverity": "MEDIUM",
            "privilegesRequired": "LOW",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "LOW",
            "subIntegrityImpact": "LOW",
            "userInteraction": "ACTIVE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "LOW",
            "vulnIntegrityImpact": "LOW"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-79",
              "description": "Improper Neutralization of Input During Web Page Generation (\u0027Stored Cross-site Scripting\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-01-21T17:32:09.385Z",
        "orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
        "shortName": "VulnCheck"
      },
      "references": [
        {
          "name": "Full Disclosure Repository",
          "tags": [
            "technical-description",
            "exploit"
          ],
          "url": "https://github.com/boku7/gsSMTP-Csrf2Xss2RCE/"
        },
        {
          "name": "Vendor Homepage",
          "tags": [
            "product"
          ],
          "url": "http://get-simple.info"
        },
        {
          "name": "GetSimple CMS GitHub Repository",
          "tags": [
            "product"
          ],
          "url": "https://github.com/GetSimpleCMS/GetSimpleCMS"
        },
        {
          "name": "ExploitDB-49798",
          "tags": [
            "exploit"
          ],
          "url": "https://www.exploit-db.com/exploits/49798"
        },
        {
          "name": "VulnCheck Advisory: GetSimple CMS My SMTP Contact Plugin 1.1.2 - Stored XSS",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://www.vulncheck.com/advisories/getsimple-cms-my-smtp-contact-plugin-stored-xss"
        }
      ],
      "title": "GetSimple CMS My SMTP Contact Plugin 1.1.2 - Stored XSS",
      "x_generator": {
        "engine": "vulncheck"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
    "assignerShortName": "VulnCheck",
    "cveId": "CVE-2021-47870",
    "datePublished": "2026-01-21T17:32:09.385Z",
    "dateReserved": "2026-01-18T12:35:05.171Z",
    "dateUpdated": "2026-01-22T16:51:05.377Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

GHSA-XCF5-JFW6-6364

CVE-2021-47870 (GCVE-0-2021-47870)

Tags

Sightings

Nomenclature