CVE-2022-1503

A vulnerability, which was classified as problematic, has been found in GetSimple CMS. Affected by this issue is the file /admin/edit.php of the Content Module. The manipulation of the argument post-content with an input like <script>alert(1)</script> leads to cross site scripting. The attack may be launched remotely but requires authentication. Expoit details have been disclosed within the advisory.

• CWE-79
• CWE-79

• https://github.com/joinia/project/blob/main/GetSimple/GetSimplereadme.mdExploit, Third Party Advisory
• https://vuldb.com/?id.198542Third Party Advisory
• https://github.com/joinia/project/blob/main/GetSimple/GetSimplereadme.mdExploit, Third Party Advisory
• https://vuldb.com/?id.198542Third Party Advisory

Published

Apr 27, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-1497Inappropriate implementation in Input in Google Chrome prior…6.5
• CVE-2022-1498Inappropriate implementation in HTML Parser in Google Chrome…4.3
• CVE-2022-1499Inappropriate implementation in WebAuthentication in Google …6.3
• CVE-2022-1500Insufficient data validation in Dev Tools in Google Chrome p…6.5
• CVE-2022-1501Inappropriate implementation in iframe in Google Chrome prio…6.5
• CVE-2022-1502Permissions were not properly verified in the API on project…4.3
• CVE-2022-1504XSS in /demo/module/?module=HERE in GitHub repository microw…6.1
• CVE-2022-1505The RSVPMaker plugin for WordPress is vulnerable to unauthen…7.5
• CVE-2022-1506The WP Born Babies WordPress plugin through 1.0 does not san…5.4
• CVE-2022-1507chafa: NULL Pointer Dereference in function gif_internal_dec…5.5
• CVE-2022-1508An out-of-bounds read flaw was found in the Linux kernel’s i…6.1
• CVE-2022-1509Command Injection Vulnerability in GitHub repository hestiac…8.8