CVE-2021-47733

CVE-2021-47733 describes a medium-severity cross-site scripting (XSS) vulnerability in CMSimple 5.4. Attackers can bypass input filtering by encoding malicious JavaScript payloads, such as ')-alert(1)//, into Unicode. This allows for arbitrary script execution when a victim interacts with delete buttons, potentially leading to client-side compromise. While the CVSS score is 6.1, there is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this vulnerability.