CVE-2021-47830 GetSimple CMS My SMTP Contact Plugin 1.1.1 - CSRF
An attacker can trick an authenticated administrator into changing SMTP settings via a malicious webpage, leading to unauthorized configuration changes.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2021-47830?
CVE-2021-47830 is a medium-severity vulnerability in GetSimple CMS My SMTP Contact Plugin, published on 21 Jan 2026. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
GetSimple CMS My SMTP Contact Plugin 1.1.1 contains a cross-site request forgery (CSRF) vulnerability. Attackers can craft a malicious webpage that, when visited by an authenticated administrator, can change SMTP configuration settings in the plugin. This may allow unauthorized changes but does not directly enable remote code execution.
Weakness: CWE-352
Which versions are affected by CVE-2021-47830?
It affects 1 product.
Products include Get-Simple Getsimplecms.
How do I fix CVE-2021-47830?
No fix has been published for CVE-2021-47830 yet. Limit exposure of the affected software until one is available.
Is CVE-2021-47830 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2021-47830 exists.
Other vulnerabilities in GetSimple CMS My SMTP Contact Plugin
Sources
Also known as GHSA-4qf5-7jr3-q9pq.