Priority HIGH 82
GetSimple CMS CE 3.3.19 suffers from arbitrary code execution in the template editing function in the background management system, which can be used by an attacker to implement RCE.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00857 · Published 2024-12-16 · No fix listed CWE-94
Priority HIGH 80
GetSimple CMS is a content management system (CMS), and GetSimple CMS CE is the community edition of that CMS.
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.00425 · Published 2026-10-01 · No fix listed CWE-338
Priority HIGH 78
GetSimple CMS is a content management system.
CVSS 4.0HIGH 8.6· Network · High privileges · No interaction · EPSS 0.01002 · Published 2025-05-30 · No fix listed CWE-77
Priority HIGH 76
GetSimple CMS is a content management system (CMS), and GetSimple CMS CE is the community edition of that CMS.
CVSS 3.1CRITICAL 9.6· Network · No auth · User interaction · EPSS 0.00249 · Published 2026-10-01 · Fixed in 1.5 CWE-352
Priority HIGH 74
GetSimple CMS is a content management system (CMS), and GetSimple CMS CE is the community edition of that CMS.
CVSS 3.1CRITICAL 9.1· Network · High privileges · No interaction · EPSS 0.00529 · Published 2026-10-01 · Fixed in 1.5 CWE-352
Priority HIGH 73
GetSimple CMS CE 3.3.19 is vulnerable to Server-Side Request Forgery (SSRF) in the backend plugin module.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00253 · Published 2024-12-18 · No fix listed CWE-352
Priority HIGH 71
GetSimple CMS is a content management system (CMS), and GetSimple CMS CE is the community edition of that CMS.
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.00398 · Published 2026-10-01 · No fix listed CWE-79
Priority HIGH 71
GetSimple CMS is a content management system.
CVSS 4.0HIGH 8.8· Network · No auth · No interaction · EPSS 0.00581 · Published 2026-02-20 · No fix listed CWE-22
Priority HIGH 71
GetSimple CMS is a content management system.
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.00454 · Published 2026-02-20 · No fix listed CWE-200
Priority HIGH 67
In the GetSimple CMS CE 3.3.19 management page, Server-Side Request Forgery (SSRF) can be achieved in the plug-in download address in the backend management system.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.00415 · Published 2024-12-18 · No fix listed CWE-918
Priority HIGH 66
GetSimple CMS is a content management system (CMS), and GetSimple CMS CE is the community edition of that CMS.
CVSS 3.1HIGH 7.5· Network · High privileges · User interaction · EPSS 0.00263 · Published 2026-10-01 · Fixed in 1.5 CWE-918
Priority MEDIUM 64
GetSimple CMS is a content management system (CMS), and GetSimple CMS CE is the community edition of that CMS.
CVSS 4.0HIGH 7.1· Network · Low privileges · No interaction · EPSS 0.00337 · Published 2026-10-01 · No fix listed CWE-22
Priority MEDIUM 64
GetSimple CMS is a content management system.
CVSS 4.0MEDIUM 6.9· Network · Low privileges · User interaction · EPSS 0.00227 · Published 2026-02-20 · No fix listed CWE-79
Priority MEDIUM 64
GetSimple CMS is a content management system.
CVSS 4.0HIGH 7.1· Network · No auth · User interaction · EPSS 0.00201 · Published 2026-02-20 · No fix listed CWE-352
Priority MEDIUM 50
GetSimple CMS is a content management system (CMS), and GetSimple CMS CE is the community edition of that CMS.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00553 · Published 2026-09-11 · No fix listed CWE-285
Priority MEDIUM 44
GetSimple CMS is a content management system (CMS), and GetSimple CMS CE is the community edition of that CMS.
CVSS 4.0HIGH 8.8· Network · No auth · No interaction · EPSS 0.00258 · Published 2026-10-01 · No fix listed CWE-79
Priority MEDIUM 43
GetSimple CMS is a content management system.
CVSS 3.1CRITICAL 9.7· Network · No auth · User interaction · EPSS 0.00352 · Published 2026-03-10 · No fix listed CWE-352
Priority LOW 22
GetSimpleCMS Community Edition (CE) versions prior to 3.3.22 (3.3.16 tested) contains a stored cross-site scripting (XSS) vulnerability in the Theme to Components functionality within components.php.
CVSS 4.0MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.00333 · Published 2026-02-24 · Fixed in 3.3.22 CWE-79
THREATIST.IORead the docs