CVE-2021-47830

This exploit chains a CSRF vulnerability with a stored XSS vulnerability in the My SMTP Contact plugin for GetSimple CMS to achieve remote code execution. The XSS payload bypasses htmlspecialchars() using hex-escaped characters to inject a script that collects a CSRF token and uploads a webshell.

This exploit chains a CSRF vulnerability with PHP code injection in GetSimple CMS's My SMTP Contact plugin to achieve remote code execution. The PoC sets up a malicious server to deliver a CSRF payload that injects PHP code into the plugin's configuration, leading to RCE when an admin visits the site.