CVE-2010-4513: Zimplit CMS

Medium severity, CVSS 4.3. EPSS: 1.8% chance of exploitation in the next 30 days.

Multiple cross-site scripting (XSS) vulnerabilities in Zimplit CMS 3.0, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the (1) file parameter in a load action to zimplit.php and (2) client parameter to English_manual_version_2.php.

Affected products

• Zimplit Zimplit CMS: up to and including 3.0

Published 2010-12-09. Last modified 2026-06-16.