TI-2026-22758 CVE-2026-28495
GetSimple CMS has CSRF to Remote Code Execution via Arbitrary PHP Write in gsconfig.php
Priority MEDIUM 43
GetSimple CMS is a content management system.
Vulnerabilities
10 records
TI-2026-21300 CVE-2026-26351 · GHSA-98hq-gxg8-fchj
GetSimpleCMS-CE < 3.3.22 Stored XSS via components.php
Priority LOW 22
GetSimpleCMS Community Edition (CE) versions prior to 3.3.22 (3.3.16 tested) contains a stored cross-site scripting (XSS) vulnerability in the Theme to Components functionality within components.php.
TI-2026-21637 CVE-2026-27202
GetSimple CMS: Uploaded Files (feature) Arbitrary File Read Vulnerability
Priority HIGH 71
GetSimple CMS is a content management system.
TI-2026-21606 CVE-2026-27161
Unauthenticated Information Disclosure via .htaccess Reliance in Sensitive Directories
Priority HIGH 71
GetSimple CMS is a content management system.
TI-2026-21597 CVE-2026-27147
GetSimple CMS: Stored Cross-Site Scripting (XSS) via SVG File Upload (Authenticated)
Priority MEDIUM 64
GetSimple CMS is a content management system.
TI-2026-21596 CVE-2026-27146
GetSimple CMS: Cross-Site Request Forgery (CSRF) in File Upload Allows Arbitrary Uploads
Priority MEDIUM 64
GetSimple CMS is a content management system.
TI-2025-30771 CVE-2025-48492
GetSimple CMS RCE in Edit component
Priority HIGH 78
GetSimple CMS is a content management system.
TI-2024-36777 CVE-2024-55088 · GHSA-36vc-7w44-2c6h
GetSimple CMS CE 3.3.19 is vulnerable to Server-Side Request Forgery (SSRF) in the backend plugin module.
Priority HIGH 73
GetSimple CMS CE 3.3.19 is vulnerable to Server-Side Request Forgery (SSRF) in the backend plugin module.
TI-2024-36776 CVE-2024-55086 · GHSA-cf4r-pxww-5q94
In the GetSimple CMS CE 3.3.19 management page, Server-Side Request Forgery (SSRF) can be…
Priority HIGH 67
In the GetSimple CMS CE 3.3.19 management page, Server-Side Request Forgery (SSRF) can be achieved in the plug-in download address in the backend management system.
TI-2024-36775 CVE-2024-55085 · GHSA-38cx-x5rg-m9mx
GetSimple CMS CE 3.3.19 suffers from arbitrary code execution in the template editing…
Priority HIGH 82
GetSimple CMS CE 3.3.19 suffers from arbitrary code execution in the template editing function in the background management system, which can be used by an attacker to implement RCE.