Get-Simple / Getsimplecms
22 CVEs
| CVE ID | Description | Severity | CVSS | Published |
|---|---|---|---|---|
| CVE-2021-47870 | GetSimple CMS My SMTP Contact Plugin 1.1.2 - Stored XSS | MEDIUM | 4.8 | Jan 21, 2026 |
| CVE-2021-47860 | GetSimple CMS Custom JS 0.1 - CSRF to XSS to RCE | HIGH | 8.5 | Jan 21, 2026 |
| CVE-2021-47778 | GetSimple CMS My SMTP Contact Plugin 1.1.2 - PHP Code Injection | HIGH | 8.6 | Jan 21, 2026 |
| CVE-2021-47830 | GetSimple CMS My SMTP Contact Plugin 1.1.1 - CSRF | MEDIUM | 5.1 | Jan 21, 2026 |
| CVE-2013-10032 | GetSimple CMS 3.2.1 Authenticated RCE via Arbitrary PHP File Upload | HIGH | 8.7 | Jul 25, 2025 |
| CVE-2024-11125 | GetSimpleCMS profile.php cross-site request forgery | MEDIUM | 6.9 | Nov 12, 2024 |
| CVE-2023-51246 | A Cross Site Scripting (XSS) vulnerability in GetSimple CMS 3.3.16 exists when using Source Code Mode as a backend user to add articles via the /admin/edit.php… | MEDIUM | 5.4 | Jan 8, 2024 |
| CVE-2023-6188 | GetSimpleCMS theme-edit.php code injection | CRITICAL | 9.8 | Nov 17, 2023 |
| CVE-2023-46040 | Cross Site Scripting vulnerability in GetSimpleCMS v.3.4.0a allows a remote attacker to execute arbitrary code via the a crafted payload to the components.php… | MEDIUM | 5.4 | Oct 31, 2023 |
| CVE-2023-46042 | An issue in GetSimpleCMS v.3.4.0a allows a remote attacker to execute arbitrary code via a crafted payload to the phpinfo(). | CRITICAL | 9.8 | Oct 19, 2023 |
| CVE-2021-36601 | GetSimpleCMS 3.3.16 contains a cross-site Scripting (XSS) vulnerability, where Function TSL does not filter check settings.php Website URL: "siteURL" parameter. | MEDIUM | 6.1 | Aug 10, 2021 |
| CVE-2020-21353 | A stored cross site scripting (XSS) vulnerability in /admin/snippets.php of GetSimple CMS 3.4.0a allows attackers to execute arbitrary web scripts or HTML via… | MEDIUM | 5.4 | Aug 6, 2021 |
| CVE-2020-18660 | GetSimpleCMS <=3.3.15 has an open redirect in admin/changedata.php via the redirect function to the url parameter. | MEDIUM | 6.1 | Jun 23, 2021 |
| CVE-2020-18659 | Cross Site Scripting vulnerability in GetSimpleCMS <=3.3.15 via the (1) sitename, (2) username, and (3) email parameters to /admin/setup.php | MEDIUM | 6.1 | Jun 23, 2021 |
| CVE-2020-18658 | Cross Site Scriptiong (XSS) vulnerability in GetSimpleCMS <=3.3.15 via the timezone parameter to settings.php. | MEDIUM | 6.1 | Jun 23, 2021 |
| CVE-2020-18657 | Cross Site Scripting (XSS) vulnerability in GetSimpleCMS <= 3.3.15 in admin/changedata.php via the redirect_url parameter and the headers_sent function. | MEDIUM | 6.1 | Jun 23, 2021 |
| CVE-2020-20391 | Cross Site Scripting vulnerability in GetSimpleCMS 3.4.0a in admin/snippets.php via (1) Add Snippet and (2) Save snippets. | MEDIUM | 5.4 | Jun 23, 2021 |
| CVE-2020-20389 | Cross Site Scripting (XSS) vulnerability in GetSimpleCMS 3.4.0a in admin/edit.php. | MEDIUM | 4.8 | Jun 23, 2021 |
| CVE-2021-28977 | Cross Site Scripting vulnerability in GetSimpleCMS 3.3.16 in admin/upload.php by adding comments or jpg and other file header information to the content of xla… | MEDIUM | 4.8 | Jun 23, 2021 |
| CVE-2021-28976 | Remote Code Execution vulnerability in GetSimpleCMS before 3.3.16 in admin/upload.php via phar filess. | HIGH | 7.2 | Jun 23, 2021 |
| CVE-2020-18191 | GetSimpleCMS-3.3.15 is affected by directory traversal. Remote attackers are able to delete arbitrary files via /GetSimpleCMS-3.3.15/admin/log.php | CRITICAL | 9.1 | Oct 2, 2020 |
| CVE-2019-9915 | GetSimpleCMS 3.3.13 has an Open Redirect via the admin/index.php redirect parameter. | MEDIUM | 6.1 | Mar 21, 2019 |
Showing 1 to 22 of 22 CVEs