Login Request a demo
GC
Product
Getsimple Cms
by Getsimple-ce · last CVE Mar 10, 2026
10
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities10In the news0Timeline
Severity mix
Critical 1High 6Medium 3Low 0
Severity
All severities10Critical1High6Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Getsimple Cms to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-55085
9.8
1%
Dec 16
GetSimple CMS CE 3.3.19 suffers from arbitrary code execution in the template editing function in the background management system, which can be used by an attacker to implement…
Affected: 3.3.19
CVE-2026-28495
8.8
0%
Mar 10
GetSimple CMS has CSRF to Remote Code Execution via Arbitrary PHP Write in gsconfig.php
Affected: through 3.3.22
CVE-2025-48492
8.8
1%
May 30
GetSimple CMS RCE in Edit component
Affected: 3.3.16 before 3.3.22
CVE-2024-55088
8.8
0%
Dec 18
GetSimple CMS CE 3.3.19 is vulnerable to Server-Side Request Forgery (SSRF) in the backend plugin module
Affected: 3.3.19
CVE-2026-27202
7.5
1%
Feb 20
GetSimple CMS: Uploaded Files (feature) Arbitrary File Read Vulnerability
Affected: 3.3.22
CVE-2026-27161
7.5
0%
Feb 20
Unauthenticated Information Disclosure via .htaccess Reliance in Sensitive Directories
Affected: through 3.3.22
CVE-2024-55086
7.2
0%
Dec 18
In the GetSimple CMS CE 3.3.19 management page, Server-Side Request Forgery (SSRF) can be achieved in the plug-in download address in the backend management system
Affected: 3.3.19
CVE-2026-27147
5.4
0%
Feb 20
GetSimple CMS: Stored Cross-Site Scripting (XSS) via SVG File Upload (Authenticated)
Affected: through 3.3.22
CVE-2026-26351
4.8
0%
Feb 24
GetSimpleCMS-CE < 3.3.22 Stored XSS via components.php
Affected: 3.3.16 before 3.3.22
CVE-2026-27146
4.5
0%
Feb 20
GetSimple CMS: Cross-Site Request Forgery (CSRF) in File Upload Allows Arbitrary Uploads
Affected: through 3.3.22
Showing 10