Get-simple

Getsimplecms

17 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.8

CVE-2013-10032

Exploit
  • EPSS 56.8%
  • Veröffentlicht 25.07.2025 16:15:24
  • Zuletzt bearbeitet 23.09.2025 23:44:07

An authenticated remote code execution vulnerability exists in GetSimpleCMS version 3.2.1. The application’s upload.php endpoint allows authenticated users to upload arbitrary files without proper validation of MIME types or extensions. By uploading ...

4.3

CVE-2024-11125

Exploit
  • EPSS 0.19%
  • Veröffentlicht 12.11.2024 15:15:06
  • Zuletzt bearbeitet 15.11.2024 23:01:32

A vulnerability was found in GetSimpleCMS 3.3.16 and classified as problematic. This issue affects some unknown processing of the file /admin/profile.php. The manipulation leads to cross-site request forgery. The attack may be initiated remotely. The...

5.4

CVE-2023-51246

  • EPSS 0.2%
  • Veröffentlicht 08.01.2024 20:15:44
  • Zuletzt bearbeitet 16.06.2025 19:15:25

A Cross Site Scripting (XSS) vulnerability in GetSimple CMS 3.3.16 exists when using Source Code Mode as a backend user to add articles via the /admin/edit.php page.

9.8

CVE-2023-6188

Exploit
  • EPSS 0.12%
  • Veröffentlicht 17.11.2023 18:15:07
  • Zuletzt bearbeitet 21.11.2024 08:43:19

A vulnerability was found in GetSimpleCMS 3.3.16/3.4.0a. It has been rated as critical. This issue affects some unknown processing of the file /admin/theme-edit.php. The manipulation leads to code injection. The attack may be initiated remotely. The ...

5.4

CVE-2023-46040

Exploit
  • EPSS 0.22%
  • Veröffentlicht 31.10.2023 02:15:08
  • Zuletzt bearbeitet 21.11.2024 08:27:47

Cross Site Scripting vulnerability in GetSimpleCMS v.3.4.0a allows a remote attacker to execute arbitrary code via the a crafted payload to the components.php function.

9.8

CVE-2023-46042

Exploit
  • EPSS 68.24%
  • Veröffentlicht 19.10.2023 15:15:09
  • Zuletzt bearbeitet 21.11.2024 08:27:47

An issue in GetSimpleCMS v.3.4.0a allows a remote attacker to execute arbitrary code via a crafted payload to the phpinfo().

6.1

CVE-2021-36601

Exploit
  • EPSS 0.29%
  • Veröffentlicht 10.08.2021 15:15:08
  • Zuletzt bearbeitet 21.11.2024 06:13:51

GetSimpleCMS 3.3.16 contains a cross-site Scripting (XSS) vulnerability, where Function TSL does not filter check settings.php Website URL: "siteURL" parameter.

5.4

CVE-2020-21353

Exploit
  • EPSS 0.28%
  • Veröffentlicht 06.08.2021 23:15:07
  • Zuletzt bearbeitet 21.11.2024 05:12:31

A stored cross site scripting (XSS) vulnerability in /admin/snippets.php of GetSimple CMS 3.4.0a allows attackers to execute arbitrary web scripts or HTML via crafted payload in the Edit Snippets module.

6.1

CVE-2020-18660

Exploit
  • EPSS 0.32%
  • Veröffentlicht 23.06.2021 21:15:08
  • Zuletzt bearbeitet 21.11.2024 05:08:40

GetSimpleCMS <=3.3.15 has an open redirect in admin/changedata.php via the redirect function to the url parameter.

6.1

CVE-2020-18659

Exploit
  • EPSS 0.38%
  • Veröffentlicht 23.06.2021 19:15:07
  • Zuletzt bearbeitet 21.11.2024 05:08:40

Cross Site Scripting vulnerability in GetSimpleCMS <=3.3.15 via the (1) sitename, (2) username, and (3) email parameters to /admin/setup.php