CVE-2021-47733 - CMSimple 5.4 Cross-Site Scripting via HTML Unicode Encoding

CVE ID : CVE-2021-47733 Published : Dec. 23, 2025, 8:15 p.m. | 32 minutes ago Description : CMSimple 5.4 contains a cross-site scripting vulnerability that allows attackers to bypass input filtering by using HTML to Unicode encoding. Attackers can inject malicious scripts by encoding payloads like ')-alert(1)// and execute arbitrary JavaScript when victims interact with delete buttons. Severity: 6.1 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Source: Telegram CVE Monitor