CVEvulnerability
CVE-2021-47830
5.1 MEDIUM
Official page ↗
- Status
- Analyzed
- Published
- 2026-01-21
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 4.0 ([email protected])
- 5.1 MEDIUM — CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
- CVSS 3.1 ([email protected])
- 6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
- Weaknesses
- CWE-352
Description
GetSimple CMS My SMTP Contact Plugin 1.1.1 contains a cross-site request forgery (CSRF) vulnerability. Attackers can craft a malicious webpage that, when visited by an authenticated administrator, can change SMTP configuration settings in the plugin. This may allow unauthorized changes but does not directly enable remote code execution.
Affected configurations
• get-simple getsimplecms 1.1.1
Related
Weakness · CWE (1)
- CWE-352 Cross-Site Request Forgery weakness
References
- http://get-simple.info Product
- https://github.com/GetSimpleCMS/GetSimpleCMS Product
- https://www.exploit-db.com/exploits/49774 Exploit, Third Party Advisory, VDB Entry
- https://www.exploit-db.com/exploits/49798 Exploit, Third Party Advisory, VDB Entry
- https://www.vulncheck.com/advisories/getsimple-cms-my-smtp-contact-plugin-csrf Third Party Advisory