CVE-2013-7243: Multiple cross-site scripting (XSS) vulnerabilities in GetSimple CMS 3.1.2 and 3.2.3 allow remote attackers...

Security readout for executives and security teams

This is an old GetSimple CMS cross-site scripting issue affecting versions 3.1.2 and 3.2.3. An attacker may be able to inject script or HTML through page menu or display-name fields. The available bundle does not provide CVSS, confirmed exploitation, or a named fixed version. Exposure is limited to organizations still running GetSimple CMS 3.1.2 or 3.2.3. Risk is higher if the relevant CMS editing or settings surfaces are internet-accessible. The source bundle does not state authentication requirements or broader product impact. Prioritize remediation if legacy GetSimple CMS is still used for public or business-critical sites. This is not KEV-listed, but stored XSS in a CMS can support account compromise, content manipulation, and user trust damage. Mitigation focus: Inventory GetSimple CMS deployments and confirm exact versions.; Check current GetSimple CMS vendor guidance for fixed versions or supported upgrade paths.; Restrict access to CMS editing and settings interfaces where possible..

Prepared

Jun 14, 2026, 14:50 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.