Critical severity · published Dec 16, 2024
CVE-2024-55085
GetSimple CMS CE 3.3.19 suffers from arbitrary code execution in the template editing function in the background management system, which can be used by an attacker to implement…
9.8
CVSS
0.9%
EPSS
No
On KEV
Description
GetSimple CMS CE 3.3.19 suffers from arbitrary code execution in the template editing function in the background management system, which can be used by an attacker to implement RCE.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.9% · higher than 58% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
GC
Getsimple Cms · Getsimple-ce
3.3.19 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-55085
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-55085
Product
https://getsimple-ce.ovh/
Broken Link
https://tasteful-stamp-da4.notion.site/CVE-2024-55085-15b1e0f227cb80a5aee6faeb820bf7e6
More from Getsimple Cms
8.8
CVE-2026-28495
GetSimple CMS has CSRF to Remote Code Execution via Arbitrary PHP Write in gsconfig.php
8.8
CVE-2025-48492
GetSimple CMS RCE in Edit component
8.8
CVE-2024-55088
GetSimple CMS CE 3.3.19 is vulnerable to Server-Side Request Forgery (SSRF) in the backend plugin module
7.5
CVE-2026-27202
GetSimple CMS: Uploaded Files (feature) Arbitrary File Read Vulnerability
7.5
CVE-2026-27161
Unauthenticated Information Disclosure via .htaccess Reliance in Sensitive Directories