CVE:CVE-2010-4863
CNNVD:CNNVD-201110-045
GetSimple CMS 2.01版本中的admin/changedata.php中存在跨站脚本攻击漏洞。远程攻击者可借助post-title参数注入任意web脚本和HTML。
solution:Upgrade get-simple getsimple_cms to a higher version than 2.01,and avoid the version 2.01