GetSimpleCMS-CE

Records18All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical6CVSS 9.0–10.0

CVSS high10CVSS 7.0–8.9

Exploited now

GetSimpleCMS-CE records in CISA KEV

No GetSimpleCMS-CE vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Getsimple Cms 10 records HIGH

Records

10 records in Getsimple Cms · all components

TI-2024-36775 CVE-2024-55085 · GHSA-38cx-x5rg-m9mx

GetSimple CMS CE 3.3.19 suffers from arbitrary code execution in the template editing…

HIGH 82

GetSimple CMS CE 3.3.19 suffers from arbitrary code execution in the template editing function in the background management system, which can be used by an attacker to implement RCE.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00857 Published 2024-12-16 No fix listed CWE-94

TI-2025-30771 CVE-2025-48492

GetSimple CMS RCE in Edit component

HIGH 78

GetSimple CMS is a content management system.

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.01002 Published 2025-05-30 No fix listed CWE-77

TI-2024-36777 CVE-2024-55088 · GHSA-36vc-7w44-2c6h

GetSimple CMS CE 3.3.19 is vulnerable to Server-Side Request Forgery (SSRF) in the backend plugin module.

HIGH 73

GetSimple CMS CE 3.3.19 is vulnerable to Server-Side Request Forgery (SSRF) in the backend plugin module.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00253 Published 2024-12-18 No fix listed CWE-352

TI-2026-21637 CVE-2026-27202

GetSimple CMS: Uploaded Files (feature) Arbitrary File Read Vulnerability

HIGH 71

GetSimple CMS is a content management system.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00581 Published 2026-02-20 No fix listed CWE-22

TI-2026-21606 CVE-2026-27161

Unauthenticated Information Disclosure via .htaccess Reliance in Sensitive Directories

HIGH 71

GetSimple CMS is a content management system.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00454 Published 2026-02-20 No fix listed CWE-200

TI-2024-36776 CVE-2024-55086 · GHSA-cf4r-pxww-5q94

In the GetSimple CMS CE 3.3.19 management page, Server-Side Request Forgery (SSRF) can be…

HIGH 67

In the GetSimple CMS CE 3.3.19 management page, Server-Side Request Forgery (SSRF) can be achieved in the plug-in download address in the backend management system.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00415 Published 2024-12-18 No fix listed CWE-918

TI-2026-21597 CVE-2026-27147

GetSimple CMS: Stored Cross-Site Scripting (XSS) via SVG File Upload (Authenticated)

MEDIUM 64

GetSimple CMS is a content management system.

CVSS 4.0MEDIUM 6.9 Network Low privileges User interaction EPSS 0.00227 Published 2026-02-20 No fix listed CWE-79

TI-2026-21596 CVE-2026-27146

GetSimple CMS: Cross-Site Request Forgery (CSRF) in File Upload Allows Arbitrary Uploads

MEDIUM 64

GetSimple CMS is a content management system.

CVSS 4.0HIGH 7.1 Network No auth User interaction EPSS 0.00201 Published 2026-02-20 No fix listed CWE-352

TI-2026-22758 CVE-2026-28495

GetSimple CMS has CSRF to Remote Code Execution via Arbitrary PHP Write in gsconfig.php

MEDIUM 43

GetSimple CMS is a content management system.

CVSS 3.1CRITICAL 9.7 Network No auth User interaction EPSS 0.00352 Published 2026-03-10 No fix listed CWE-352

TI-2026-21300 CVE-2026-26351 · GHSA-98hq-gxg8-fchj

GetSimpleCMS-CE < 3.3.22 Stored XSS via components.php

LOW 22

GetSimpleCMS Community Edition (CE) versions prior to 3.3.22 (3.3.16 tested) contains a stored cross-site scripting (XSS) vulnerability in the Theme to Components functionality within components.php.

CVSS 4.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.00333 Published 2026-02-24 Fixed in 3.3.22 CWE-79

Open these records in search →