CVE-2021-47830CWE-352

GetSimple CMS My SMTP Contact Plugin 1.1.1 - CSRF

Medium · published January 21, 2026

CVSS v4.0
5.1
EPSS
0%
Percentile
32.8
In the wild
Unconfirmed
What it is

GetSimple CMS My SMTP Contact Plugin 1.1.1 contains a cross-site request forgery (CSRF) vulnerability. Attackers can craft a malicious webpage that, when visited by an authenticated administrator, can change SMTP configuration settings in the plugin. This may allow unauthorized changes but does not directly enable remote code execution.

The record
Technical detail
CVSS v4.0
5.1 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
EPSS
0.00397 · 32.8th percentile
Weakness
CWE-352 · Cross-Site Request Forgery (CSRF)
Published
2026-01-21T17:27Z
EPSS history
Timeline
  • 21 JAN 17:27Z
    GetSimple CMS My SMTP Contact Plugin 1.1.1 - CSRF
    cvelistv5