GE
Vendor
Get-simple
49
CVEs
0
On KEV
0
New 30D
Products
GC9.8
Getsimple Cms
Get-simple
26 CVEs0 on KEV0 new
GE9.8
Getsimplecms
Get-simple.
22 CVEs0 on KEV0 new
MS7.2
My SMTP Contact Plugin
Get-Simple
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2021-47870 | GE Getsimplecms Get-simple | 5.4 | Jan 21 | GetSimple CMS My SMTP Contact Plugin 1.1.2 - Stored XSS |
| CVE-2021-47860 | GE Getsimplecms Get-simple | 4.3 | Jan 21 | GetSimple CMS Custom JS 0.1 - CSRF to XSS to RCE |
| CVE-2021-47778 | MS My SMTP Contact Plugin Get-Simple | 7.2 | Jan 21 | GetSimple CMS My SMTP Contact Plugin 1.1.2 - PHP Code Injection |
| CVE-2021-47830 | GE Getsimplecms Get-simple | 6.5 | Jan 21 | GetSimple CMS My SMTP Contact Plugin 1.1.1 - CSRF |
| CVE-2013-10032 | GE Getsimplecms Get-simple | 8.8 | Jul 25 | GetSimple CMS 3.2.1 Authenticated RCE via Arbitrary PHP File Upload |
| CVE-2024-11125 | GE Getsimplecms Get-simple | 4.3 | Nov 12 | GetSimpleCMS profile.php cross-site request forgery |
| CVE-2023-51246 | GE Getsimplecms Get-simple | 5.4 | Jan 8 | A Cross Site Scripting (XSS) vulnerability in GetSimple CMS 3.3.16 exists when using Source Code Mode as a backend user to add articles via the /admin/edit.php page |
| CVE-2023-6188 | GE Getsimplecms Get-simple | 9.8 | Nov 17 | GetSimpleCMS theme-edit.php code injection |
| CVE-2023-46040 | GE Getsimplecms Get-simple | 5.4 | Oct 31 | Cross Site Scripting vulnerability in GetSimpleCMS v.3.4.0a allows a remote attacker to execute arbitrary code via the a crafted payload to the components.php function |
| CVE-2023-46042 | GE Getsimplecms Get-simple | 9.8 | Oct 19 | An issue in GetSimpleCMS v.3.4.0a allows a remote attacker to execute arbitrary code via a crafted payload to the phpinfo() |
| CVE-2022-41544 | GC Getsimple Cms Get-simple | 9.8 | Oct 18 | GetSimple CMS v3.3.16 was discovered to contain a remote code execution (RCE) vulnerability via the edited_file parameter in admin/theme-edit.php |
| CVE-2022-1503 | GC Getsimple Cms Get-simple | 5.4 | Apr 27 | A vulnerability, which was classified as problematic, has been found in GetSimple CMS |
| CVE-2021-36601 | GE Getsimplecms Get-simple | 6.1 | Aug 10 | GetSimpleCMS 3.3.16 contains a cross-site Scripting (XSS) vulnerability, where Function TSL does not filter check settings.php Website URL: "siteURL" parameter |
| CVE-2020-21353 | GE Getsimplecms Get-simple | 5.4 | Aug 6 | A stored cross site scripting (XSS) vulnerability in /admin/snippets.php of GetSimple CMS 3.4.0a allows attackers to execute arbitrary web scripts or HTML via crafted payload in… |
| CVE-2020-18660 | GE Getsimplecms Get-simple | 6.1 | Jun 23 | GetSimpleCMS <=3.3.15 has an open redirect in admin/changedata.php via the redirect function to the url parameter |
| CVE-2020-18659 | GE Getsimplecms Get-simple | 6.1 | Jun 23 | Cross Site Scripting vulnerability in GetSimpleCMS <=3.3.15 via the (1) sitename, (2) username, and (3) email parameters to /admin/setup.php |
| CVE-2020-18658 | GE Getsimplecms Get-simple | 6.1 | Jun 23 | Cross Site Scriptiong (XSS) vulnerability in GetSimpleCMS <=3.3.15 via the timezone parameter to settings.php |
| CVE-2020-18657 | GE Getsimplecms Get-simple | 6.1 | Jun 23 | Cross Site Scripting (XSS) vulnerability in GetSimpleCMS <= 3.3.15 in admin/changedata.php via the redirect_url parameter and the headers_sent function |
| CVE-2020-20391 | GE Getsimplecms Get-simple | 5.4 | Jun 23 | Cross Site Scripting vulnerability in GetSimpleCMS 3.4.0a in admin/snippets.php via (1) Add Snippet and (2) Save snippets |
| CVE-2020-20389 | GE Getsimplecms Get-simple | 4.8 | Jun 23 | Cross Site Scripting (XSS) vulnerability in GetSimpleCMS 3.4.0a in admin/edit.php |
| CVE-2021-28977 | GE Getsimplecms Get-simple | 4.8 | Jun 23 | Cross Site Scripting vulnerability in GetSimpleCMS 3.3.16 in admin/upload.php by adding comments or jpg and other file header information to the content of xla, pages, and gzip… |
| CVE-2021-28976 | GE Getsimplecms Get-simple | 7.2 | Jun 23 | Remote Code Execution vulnerability in GetSimpleCMS before 3.3.16 in admin/upload.php via phar filess |
| CVE-2020-18191 | GE Getsimplecms Get-simple | 9.1 | Oct 2 | GetSimpleCMS-3.3.15 is affected by directory traversal |
| CVE-2020-24861 | GC Getsimple Cms Get-simple | 5.4 | Oct 1 | GetSimple CMS 3.3.16 allows in parameter 'permalink' on the Settings page persistent Cross Site Scripting which is executed when you create and open a new page |
| CVE-2020-23839 | GC Getsimple Cms Get-simple | 6.1 | Sep 1 | A Reflected Cross-Site Scripting (XSS) vulnerability in GetSimple CMS v3.3.16, in the admin/index.php login portal webpage, allows remote attackers to execute JavaScript code in… |
| CVE-2013-1420 | GC Getsimple Cms Get-simple | 6.1 | Jan 2 | Multiple cross-site scripting (XSS) vulnerabilities in GetSimple CMS before 3.2.1 allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter to… |
| CVE-2019-16333 | GC Getsimple Cms Get-simple | 5.4 | Sep 15 | GetSimple CMS v3.3.15 has Persistent Cross-Site Scripting (XSS) in admin/theme-edit.php |
| CVE-2019-11231 | GC Getsimple Cms Get-simple | 9.8 | May 22 | An issue was discovered in GetSimple CMS through 3.3.15 |
| CVE-2019-9915 | GE Getsimplecms Get-simple. | 6.1 | Mar 21 | GetSimpleCMS 3.3.13 has an Open Redirect via the admin/index.php redirect parameter |
| CVE-2018-19845 | GC Getsimple Cms Get-simple | 5.4 | Dec 31 | There is Stored XSS in GetSimple CMS 3.3.12 via the admin/edit.php "post-menu" parameter, a related issue to CVE-2018-16325 |
| CVE-2018-19421 | GC Getsimple Cms Get-simple | 3.8 | Nov 21 | In GetSimpleCMS 3.3.15, admin/upload.php blocks .html uploads but Internet Explorer render HTML elements in a .eml file, because of admin/upload-uploadify.php, and… |
| CVE-2018-19420 | GC Getsimple Cms Get-simple | 3.8 | Nov 21 | In GetSimpleCMS 3.3.15, admin/upload.php blocks .html uploads but there are several alternative cases in which HTML can be executed, such as a file with no extension or an… |
| CVE-2018-17835 | GC Getsimple Cms Get-simple | 4.8 | Oct 1 | An issue was discovered in GetSimple CMS 3.3.15 |
| CVE-2018-17103 | GC Getsimple Cms Get-simple | 8.8 | Sep 16 | An issue was discovered in GetSimple CMS v3.3.13 |
| CVE-2018-16325 | GC Getsimple Cms Get-simple | 6.1 | Sep 1 | There is XSS in GetSimple CMS 3.4.0.9 via the admin/edit.php title field |
| CVE-2018-15843 | GC Getsimple Cms Get-simple | 4.8 | Aug 25 | GetSimple CMS 3.3.14 has XSS via the admin/edit.php "Add New Page" field |
| CVE-2018-9173 | GC Getsimple Cms Get-simple | 6.1 | Apr 2 | Cross-site scripting (XSS) vulnerability in admin/template/js/uploadify/uploadify.swf in GetSimple CMS 3.3.13 allows remote attackers to inject arbitrary web script or HTML, as… |
| CVE-2017-10673 | GC Getsimple Cms Get-simple | 6.1 | Jun 29 | admin/profile.php in GetSimple CMS 3.x has XSS in a name field |
| CVE-2014-8723 | GC Getsimple Cms Get-simple | 5.3 | Mar 17 | GetSimple CMS 3.3.4 allows remote attackers to obtain sensitive information via a direct request to (1) plugins/anonymous_data.php or (2) plugins/InnovationPlugin.php, which… |
| CVE-2014-8722 | GC Getsimple Cms Get-simple | 7.5 | Mar 17 | GetSimple CMS 3.3.4 allows remote attackers to obtain sensitive information via a direct request to (1) data/users/<username>.xml, (2) backups/users/<username>.xml.bak, (3)… |
| CVE-2015-5356 | GC Getsimple Cms Get-simple | – | Jul 1 | Cross-site scripting (XSS) vulnerability in admin/filebrowser.php in GetSimple CMS before 3.3.6 allows remote attackers to inject arbitrary web script or HTML via the func… |
| CVE-2015-5355 | GC Getsimple Cms Get-simple | – | Jul 1 | Multiple cross-site scripting (XSS) vulnerabilities in GetSimple CMS before 3.3.6 allow remote attackers to inject arbitrary web script or HTML via the (1) post-content or (2)… |
| CVE-2014-8790 | GC Getsimple Cms Get-simple | – | Jan 20 | XML external entity (XXE) vulnerability in admin/api.php in GetSimple CMS 3.1.1 through 3.3.x before 3.3.5 Beta 1, when in certain configurations, allows remote attackers to read… |
| CVE-2014-1603 | GC Getsimple Cms Get-simple | – | May 14 | Multiple cross-site scripting (XSS) vulnerabilities in GetSimple CMS 3.3.1 allow remote attackers to inject arbitrary web script or HTML via the (1) param parameter to… |
| CVE-2013-7243 | GC Getsimple Cms Get-simple | – | Jan 17 | Multiple cross-site scripting (XSS) vulnerabilities in GetSimple CMS 3.1.2 and 3.2.3 allow remote attackers to inject arbitrary web script or HTML via the (1) post-menu field to… |
| CVE-2012-6621 | GC Getsimple Cms Get-simple | – | Jan 16 | Multiple cross-site scripting (XSS) vulnerabilities in GetSimple CMS 3.1, 3.1.2, 3.2.3, and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) Email… |
| CVE-2010-5052 | GC Getsimple Cms Get-simple | – | Nov 23 | Cross-site scripting (XSS) vulnerability in admin/components.php in GetSimple CMS 2.01 allows remote attackers to inject arbitrary web script or HTML via the val[] parameter |
| CVE-2010-4863 | GC Getsimple Cms Get-simple | – | Oct 5 | Cross-site scripting (XSS) vulnerability in admin/changedata.php in GetSimple CMS 2.01 allows remote attackers to inject arbitrary web script or HTML via the post-title parameter |