Get-simple vulnerabilities

Products

• Getsimple Cms 26
• Getsimplecms 21

Newest

• getsimple cms my smtp contact plugin, get-simple getsimplecms +1 more GetSimple CMS My SMTP Contact Plugin 1.1.2 - Stored XSS CVE-2021-47870 4.8 MediumJanuary 21, 2026
• get-simple getsimplecms, getsimple cms custom js plugin +1 more GetSimple CMS Custom JS 0.1 - CSRF to XSS to RCE CVE-2021-47860 8.5 HighJanuary 21, 2026
• get-simple my smtp contact plugin, getsimplecms +1 more GetSimple CMS My SMTP Contact Plugin 1.1.2 - PHP Code Injection CVE-2021-47778 8.6 HighJanuary 21, 2026
• getsimple cms my smtp contact plugin, get-simple getsimplecms +1 more GetSimple CMS My SMTP Contact Plugin 1.1.1 - CSRF CVE-2021-47830 5.1 MediumJanuary 21, 2026
• get-simple getsimplecms, getsimple cms project cms +1 more GetSimple CMS 3.2.1 Authenticated RCE via Arbitrary PHP File Upload CVE-2013-10032 Public exploit 8.7 HighJuly 25, 2025
• get-simple getsimplecms GetSimpleCMS profile.php cross-site request forgery CVE-2024-11125 6.9 MediumNovember 12, 2024
• get-simple getsimplecms A Cross Site Scripting (XSS) vulnerability in GetSimple CMS 3.3.16 exists when using Source Code... CVE-2023-51246 5.4 MediumJanuary 8, 2024
• get-simple getsimplecms GetSimpleCMS theme-edit.php code injection CVE-2023-6188 4.7 MediumNovember 17, 2023
• get-simple getsimplecms Cross Site Scripting vulnerability in GetSimpleCMS v.3.4.0a allows a remote attacker to execute... CVE-2023-46040 5.4 MediumOctober 31, 2023
• get-simple getsimplecms An issue in GetSimpleCMS v.3.4.0a allows a remote attacker to execute arbitrary code via a... CVE-2023-46042 EPSS 25.3% 9.8 CriticalOctober 19, 2023
• get-simple getsimple cms GetSimple CMS v3.3.16 was discovered to contain a remote code execution (RCE) vulnerability via... CVE-2022-41544 Public exploit EPSS 14.3% 9.8 CriticalOctober 18, 2022
• get-simple getsimple cms, getsimple cms +1 more GetSimple CMS Content Module edit.php cross site scripting CVE-2022-1503 3.5 LowApril 27, 2022
• get-simple getsimplecms GetSimpleCMS 3.3.16 contains a cross-site Scripting (XSS) vulnerability, where Function TSL does... CVE-2021-36601 6.1 MediumAugust 10, 2021
• get-simple getsimplecms A stored cross site scripting (XSS) vulnerability in /admin/snippets.php of GetSimple CMS 3.4.0a... CVE-2020-21353 5.4 MediumAugust 6, 2021
• get-simple getsimplecms GetSimpleCMS <=3.3.15 has an open redirect in admin/changedata.php via the redirect function to... CVE-2020-18660 6.1 MediumJune 23, 2021
• get-simple getsimplecms Cross Site Scripting vulnerability in GetSimpleCMS <=3.3.15 via the (1) sitename, (2) username,... CVE-2020-18659 6.1 MediumJune 23, 2021
• get-simple getsimplecms Cross Site Scriptiong (XSS) vulnerability in GetSimpleCMS <=3.3.15 via the timezone parameter to... CVE-2020-18658 6.1 MediumJune 23, 2021
• get-simple getsimplecms Cross Site Scripting (XSS) vulnerability in GetSimpleCMS <= 3.3.15 in admin/changedata.php via... CVE-2020-18657 6.1 MediumJune 23, 2021
• get-simple getsimplecms Cross Site Scripting vulnerability in GetSimpleCMS 3.4.0a in admin/snippets.php via (1) Add... CVE-2020-20391 5.4 MediumJune 23, 2021
• get-simple getsimplecms Cross Site Scripting (XSS) vulnerability in GetSimpleCMS 3.4.0a in admin/edit.php. CVE-2020-20389 4.8 MediumJune 23, 2021
• get-simple getsimplecms Cross Site Scripting vulnerability in GetSimpleCMS 3.3.16 in admin/upload.php by adding comments... CVE-2021-28977 4.8 MediumJune 23, 2021
• get-simple getsimplecms Remote Code Execution vulnerability in GetSimpleCMS before 3.3.16 in admin/upload.php via phar... CVE-2021-28976 Public exploit 7.2 HighJune 23, 2021
• get-simple getsimplecms GetSimpleCMS-3.3.15 is affected by directory traversal. Remote attackers are able to delete... CVE-2020-18191 9.1 CriticalOctober 2, 2020
• get-simple getsimple cms GetSimple CMS 3.3.16 allows in parameter 'permalink' on the Settings page persistent Cross Site... CVE-2020-24861 5.4 MediumOctober 1, 2020
• get-simple getsimple cms A Reflected Cross-Site Scripting (XSS) vulnerability in GetSimple CMS v3.3.16, in the admin/index... CVE-2020-23839 Public exploit EPSS 10.5% 6.1 MediumSeptember 1, 2020
• get-simple getsimple cms Multiple cross-site scripting (XSS) vulnerabilities in GetSimple CMS before 3.2.1 allow remote... CVE-2013-1420 6.1 MediumJanuary 2, 2020
• get-simple getsimple cms GetSimple CMS v3.3.15 has Persistent Cross-Site Scripting (XSS) in admin/theme-edit.php. CVE-2019-16333 5.4 MediumSeptember 15, 2019
• get-simple getsimple cms An issue was discovered in GetSimple CMS through 3.3.15. insufficient input sanitation in the... CVE-2019-11231 Public exploit EPSS 71.6% 9.8 CriticalMay 22, 2019
• get-simple getsimple cms There is Stored XSS in GetSimple CMS 3.3.12 via the admin/edit.php "post-menu" parameter, a... CVE-2018-19845 5.4 MediumDecember 31, 2018
• get-simple getsimple cms In GetSimpleCMS 3.3.15, admin/upload.php blocks .html uploads but Internet Explorer render HTML... CVE-2018-19421 3.8 LowNovember 21, 2018
• get-simple getsimple cms In GetSimpleCMS 3.3.15, admin/upload.php blocks .html uploads but there are several alternative... CVE-2018-19420 3.8 LowNovember 21, 2018
• get-simple getsimple cms An issue was discovered in GetSimple CMS 3.3.15. An administrator can insert stored XSS via the... CVE-2018-17835 4.8 MediumOctober 1, 2018
• get-simple getsimple cms ** DISPUTED ** An issue was discovered in GetSimple CMS v3.3.13. There is a CSRF vulnerability... CVE-2018-17103 Disputed 8.8 HighSeptember 16, 2018
• get-simple getsimple cms There is XSS in GetSimple CMS 3.4.0.9 via the admin/edit.php title field. CVE-2018-16325 6.1 MediumSeptember 1, 2018
• get-simple getsimple cms GetSimple CMS 3.3.14 has XSS via the admin/edit.php "Add New Page" field. CVE-2018-15843 4.8 MediumAugust 25, 2018
• get-simple getsimple cms Cross-site scripting (XSS) vulnerability in admin/template/js/uploadify/uploadify.swf in... CVE-2018-9173 Public exploit 6.1 MediumApril 2, 2018
• get-simple getsimple cms admin/profile.php in GetSimple CMS 3.x has XSS in a name field. CVE-2017-10673 6.1 MediumJune 29, 2017
• get-simple getsimple cms GetSimple CMS 3.3.4 allows remote attackers to obtain sensitive information via a direct request... CVE-2014-8723 5.3 MediumMarch 17, 2017
• get-simple getsimple cms GetSimple CMS 3.3.4 allows remote attackers to obtain sensitive information via a direct request... CVE-2014-8722 Public exploit EPSS 14.4% 7.5 HighMarch 17, 2017
• get-simple getsimple cms Cross-site scripting (XSS) vulnerability in admin/filebrowser.php in GetSimple CMS before 3.3.6... CVE-2015-5356 4.3 MediumJuly 1, 2015
• get-simple getsimple cms Multiple cross-site scripting (XSS) vulnerabilities in GetSimple CMS before 3.3.6 allow remote... CVE-2015-5355 4.3 MediumJuly 1, 2015
• cagintranetworks getsimple cms XML external entity (XXE) vulnerability in admin/api.php in GetSimple CMS 3.1.1 through 3.3.x... CVE-2014-8790 5.0 MediumJanuary 20, 2015
• get-simple getsimple cms Multiple cross-site scripting (XSS) vulnerabilities in GetSimple CMS 3.3.1 allow remote attackers... CVE-2014-1603 Public exploit 4.3 MediumMay 14, 2014
• get-simple getsimple cms Multiple cross-site scripting (XSS) vulnerabilities in GetSimple CMS 3.1.2 and 3.2.3 allow remote... CVE-2013-7243 4.3 MediumJanuary 17, 2014
• get-simple getsimple cms Multiple cross-site scripting (XSS) vulnerabilities in GetSimple CMS 3.1, 3.1.2, 3.2.3, and... CVE-2012-6621 4.3 MediumJanuary 16, 2014
• get-simple getsimple cms Cross-site scripting (XSS) vulnerability in admin/components.php in GetSimple CMS 2.01 allows... CVE-2010-5052 Public exploit 4.3 MediumNovember 23, 2011
• get-simple getsimple cms Cross-site scripting (XSS) vulnerability in admin/changedata.php in GetSimple CMS 2.01 allows... CVE-2010-4863 Public exploit 4.3 MediumOctober 5, 2011