GE
Vendor
Getsimple-ce
10
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-28495 | GC Getsimple Cms Getsimple-ce | 8.8 | Mar 10 | GetSimple CMS has CSRF to Remote Code Execution via Arbitrary PHP Write in gsconfig.php |
| CVE-2026-26351 | GC Getsimple Cms Getsimple-ce | 4.8 | Feb 24 | GetSimpleCMS-CE < 3.3.22 Stored XSS via components.php |
| CVE-2026-27202 | GC Getsimple Cms Getsimple-ce | 7.5 | Feb 20 | GetSimple CMS: Uploaded Files (feature) Arbitrary File Read Vulnerability |
| CVE-2026-27161 | GC Getsimple Cms Getsimple-ce | 7.5 | Feb 20 | Unauthenticated Information Disclosure via .htaccess Reliance in Sensitive Directories |
| CVE-2026-27147 | GC Getsimple Cms Getsimple-ce | 5.4 | Feb 20 | GetSimple CMS: Stored Cross-Site Scripting (XSS) via SVG File Upload (Authenticated) |
| CVE-2026-27146 | GC Getsimple Cms Getsimple-ce | 4.5 | Feb 20 | GetSimple CMS: Cross-Site Request Forgery (CSRF) in File Upload Allows Arbitrary Uploads |
| CVE-2025-48492 | GC Getsimple Cms Getsimple-ce | 8.8 | May 30 | GetSimple CMS RCE in Edit component |
| CVE-2024-55088 | GC Getsimple Cms Getsimple-ce | 8.8 | Dec 18 | GetSimple CMS CE 3.3.19 is vulnerable to Server-Side Request Forgery (SSRF) in the backend plugin module |
| CVE-2024-55086 | GC Getsimple Cms Getsimple-ce | 7.2 | Dec 18 | In the GetSimple CMS CE 3.3.19 management page, Server-Side Request Forgery (SSRF) can be achieved in the plug-in download address in the backend management system |
| CVE-2024-55085 | GC Getsimple Cms Getsimple-ce | 9.8 | Dec 16 | GetSimple CMS CE 3.3.19 suffers from arbitrary code execution in the template editing function in the background management system, which can be used by an attacker to implement… |