CVE-2012-6621: Multiple cross-site scripting (XSS) vulnerabilities in GetSimple CMS 3.1, 3.1.2, 3.2.3, and earlier allow r...

Security readout for executives and security teams

GetSimple CMS versions 3.2.3 and earlier have multiple XSS issues in administrative pages. An attacker may be able to inject script or HTML through settings fields or admin-page parameters. The supplied sources do not provide a CVSS score, confirmed patch, or active exploitation evidence. Exposure is limited to organizations still running GetSimple CMS 3.2.3 or earlier, especially where the administrative interface is reachable by untrusted users or admins may process attacker-controlled links or values. Treat this as a legacy CMS exposure issue. It is not supported by active exploitation evidence in the bundle, but affected internet-facing admin panels should be removed, upgraded, or tightly restricted. Mitigation focus: Identify any GetSimple CMS deployments and version numbers.; Check current GetSimple CMS vendor guidance for fixed or supported versions.; Upgrade or retire affected 3.2.3-and-earlier deployments if vendor guidance confirms remediation..

Prepared

Jun 14, 2026, 14:50 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.