CVE-2021-47919: Simplephpscripts Simple CMS PHP

Medium severity, CVSS 5.4. EPSS: 0.3% chance of exploitation in the next 30 days.

Simple CMS 2.1 contains a non-persistent cross-site scripting vulnerability in the preview.php file's id parameter. Attackers can inject malicious script code through a GET request to execute arbitrary scripts and potentially hijack user sessions or perform phishing attacks.

Affected products

• Simplephpscripts Simple CMS PHP: version 2.1 only

Published 2026-02-01. Last modified 2026-06-17.