GC
Product
Getsimple Cms
26
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 2Medium 12Low 2
Watch
Add Getsimple Cms to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-41544 | 9.8 | Oct 18 | GetSimple CMS v3.3.16 was discovered to contain a remote code execution (RCE) vulnerability via the edited_file parameter in admin/theme-edit.php Affected: 3.3.16 |
| CVE-2019-11231 | 9.8 | May 22 | An issue was discovered in GetSimple CMS through 3.3.15 Affected: through 3.3.15 |
| CVE-2018-17103 | 8.8 | Sep 16 | An issue was discovered in GetSimple CMS v3.3.13 Affected: 3.3.13 |
| CVE-2014-8722 | 7.5 | Mar 17 | GetSimple CMS 3.3.4 allows remote attackers to obtain sensitive information via a direct request to (1) data/users/<username>.xml, (2) backups/users/<username>.xml.bak, (3)… Affected: 3.3.4 |
| CVE-2020-23839 | 6.1 | Sep 1 | A Reflected Cross-Site Scripting (XSS) vulnerability in GetSimple CMS v3.3.16, in the admin/index.php login portal webpage, allows remote attackers to execute JavaScript code in… Affected: 3.3.16 |
| CVE-2013-1420 | 6.1 | Jan 2 | Multiple cross-site scripting (XSS) vulnerabilities in GetSimple CMS before 3.2.1 allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter to… Affected: before 3.2.1 |
| CVE-2018-16325 | 6.1 | Sep 1 | There is XSS in GetSimple CMS 3.4.0.9 via the admin/edit.php title field Affected: 3.4.0.9 |
| CVE-2018-9173 | 6.1 | Apr 2 | Cross-site scripting (XSS) vulnerability in admin/template/js/uploadify/uploadify.swf in GetSimple CMS 3.3.13 allows remote attackers to inject arbitrary web script or HTML, as… Affected: 3.3.13 |
| CVE-2017-10673 | 6.1 | Jun 29 | admin/profile.php in GetSimple CMS 3.x has XSS in a name field Affected: 3.0; 3.1; 3.1.1; 3.1.2; 3.2; 3.2.1; +6 more |
| CVE-2022-1503 | 5.4 | Apr 27 | A vulnerability, which was classified as problematic, has been found in GetSimple CMS Affected: All versions, or not specified |
| CVE-2020-24861 | 5.4 | Oct 1 | GetSimple CMS 3.3.16 allows in parameter 'permalink' on the Settings page persistent Cross Site Scripting which is executed when you create and open a new page Affected: 3.3.16 |
| CVE-2019-16333 | 5.4 | Sep 15 | GetSimple CMS v3.3.15 has Persistent Cross-Site Scripting (XSS) in admin/theme-edit.php Affected: 3.3.15 |
| CVE-2018-19845 | 5.4 | Dec 31 | There is Stored XSS in GetSimple CMS 3.3.12 via the admin/edit.php "post-menu" parameter, a related issue to CVE-2018-16325 Affected: 3.3.12 |
| CVE-2014-8723 | 5.3 | Mar 17 | GetSimple CMS 3.3.4 allows remote attackers to obtain sensitive information via a direct request to (1) plugins/anonymous_data.php or (2) plugins/InnovationPlugin.php, which… Affected: 3.3.4 |
| CVE-2018-17835 | 4.8 | Oct 1 | An issue was discovered in GetSimple CMS 3.3.15 Affected: 3.3.15 |
| CVE-2018-15843 | 4.8 | Aug 25 | GetSimple CMS 3.3.14 has XSS via the admin/edit.php "Add New Page" field Affected: 3.3.14 |
| CVE-2018-19421 | 3.8 | Nov 21 | In GetSimpleCMS 3.3.15, admin/upload.php blocks .html uploads but Internet Explorer render HTML elements in a .eml file, because of admin/upload-uploadify.php, and… Affected: 3.3.15 |
| CVE-2018-19420 | 3.8 | Nov 21 | In GetSimpleCMS 3.3.15, admin/upload.php blocks .html uploads but there are several alternative cases in which HTML can be executed, such as a file with no extension or an… Affected: 3.3.15 |
| CVE-2015-5356 | – | Jul 1 | Cross-site scripting (XSS) vulnerability in admin/filebrowser.php in GetSimple CMS before 3.3.6 allows remote attackers to inject arbitrary web script or HTML via the func… Affected: through 3.3.2 |
| CVE-2015-5355 | – | Jul 1 | Multiple cross-site scripting (XSS) vulnerabilities in GetSimple CMS before 3.3.6 allow remote attackers to inject arbitrary web script or HTML via the (1) post-content or (2)… Affected: through 3.3.2 |
| CVE-2014-8790 | – | Jan 20 | XML external entity (XXE) vulnerability in admin/api.php in GetSimple CMS 3.1.1 through 3.3.x before 3.3.5 Beta 1, when in certain configurations, allows remote attackers to read… Affected: 3.1.1; 3.1.2; 3.2; 3.2.1; 3.2.2; 3.2.3; +3 more |
| CVE-2014-1603 | – | May 14 | Multiple cross-site scripting (XSS) vulnerabilities in GetSimple CMS 3.3.1 allow remote attackers to inject arbitrary web script or HTML via the (1) param parameter to… Affected: 3.3.1 |
| CVE-2013-7243 | – | Jan 17 | Multiple cross-site scripting (XSS) vulnerabilities in GetSimple CMS 3.1.2 and 3.2.3 allow remote attackers to inject arbitrary web script or HTML via the (1) post-menu field to… Affected: 3.1.2; 3.2.3 |
| CVE-2012-6621 | – | Jan 16 | Multiple cross-site scripting (XSS) vulnerabilities in GetSimple CMS 3.1, 3.1.2, 3.2.3, and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) Email… Affected: through 3.2.3; 1.0; 1.1; 1.2; 1.3; 1.4; +16 more |
| CVE-2010-5052 | – | Nov 23 | Cross-site scripting (XSS) vulnerability in admin/components.php in GetSimple CMS 2.01 allows remote attackers to inject arbitrary web script or HTML via the val[] parameter Affected: 2.01 |
| CVE-2010-4863 | – | Oct 5 | Cross-site scripting (XSS) vulnerability in admin/changedata.php in GetSimple CMS 2.01 allows remote attackers to inject arbitrary web script or HTML via the post-title parameter Affected: 2.01 |
Showing 26