CVE-2020-23839

A Reflected Cross-Site Scripting (XSS) vulnerability in GetSimple CMS v3.3.16, in the admin/index.php login portal webpage, allows remote attackers to execute JavaScript code in the client's browser and harvest login credentials after a client clicks a link, enters credentials, and submits the login form.

• CWE-79

• http://packetstormsecurity.com/files/162016/GetSimple-CMS-3.3.16-Cross-Site-Scripting-Shell-Upload.htmlThird Party Advisory, VDB Entry
• https://github.com/GetSimpleCMS/GetSimpleCMS/issues/1330Exploit, Third Party Advisory
• https://github.com/boku7/CVE-2020-23839Third Party Advisory
• https://www.exploit-db.com/exploits/49726Third Party Advisory, VDB Entry
• http://packetstormsecurity.com/files/162016/GetSimple-CMS-3.3.16-Cross-Site-Scripting-Shell-Upload.htmlThird Party Advisory, VDB Entry
• https://github.com/GetSimpleCMS/GetSimpleCMS/issues/1330Exploit, Third Party Advisory
• https://github.com/boku7/CVE-2020-23839Third Party Advisory
• https://www.exploit-db.com/exploits/49726Third Party Advisory, VDB Entry

Published

Sep 1, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-23832A Persistent Cross-Site Scripting (XSS) vulnerability in mes…6.1
• CVE-2020-23833Projectworlds House Rental v1.0 suffers from an unauthentica…9.8
• CVE-2020-23834Insecure Service File Permissions in the bd service in Real …7.8
• CVE-2020-23835A Reflected Cross-Site Scripting (XSS) vulnerability in the …6.1
• CVE-2020-23836A Cross-Site Request Forgery (CSRF) vulnerability in edit_us…8.8
• CVE-2020-23837A Cross-Site Request Forgery (CSRF) vulnerability in the Mul…8.8
• CVE-2020-23849Stored XSS was discovered in the tree mode of jsoneditor bef…6.1
• CVE-2020-23851A stack-based buffer overflow vulnerability exists in ffjpeg…5.5
• CVE-2020-23852A heap based buffer overflow vulnerability exists in ffjpeg …5.5
• CVE-2020-23856Use-after-Free vulnerability in cflow 1.6 in the void call(c…5.5
• CVE-2020-23861A heap-based buffer overflow vulnerability exists in LibreDW…5.5
• CVE-2020-23864An issue exits in IOBit Malware Fighter version 8.0.2.547. L…7.8