GE
Vendor
GetSimpleCMS-CE
15
CVEs
0
On KEV
7
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-71542 | GE GetSimpleCMS-CE GetSimpleCMS-CE | 8.7 | Oct 1 | GetSimple CMS: Stored Cross-Site Scripting (XSS) via the "title" parameter in admin/components.php |
| CVE-2026-71426 | GE GetSimpleCMS-CE GetSimpleCMS-CE | 7.1 | Oct 1 | GetSimple CMS: Authenticated Stored Local File Inclusion (LFI) via page "template" field |
| CVE-2026-70650 | GE GetSimpleCMS-CE GetSimpleCMS-CE | 8.8 | Oct 1 | GetSimple CMS: Authenticated Stored XSS in backup viewer (backup-edit.php) via output decoding of page meta fields and content |
| CVE-2026-56662 | GE GetSimpleCMS-CE GetSimpleCMS-CE | 9.6 | Oct 1 | GetSimple CMS: Missing CSRF protection in UpdateCE allows forging a privileged server-side update request |
| CVE-2026-56661 | GE GetSimpleCMS-CE GetSimpleCMS-CE | 7.5 | Oct 1 | GetSimple CMS: Server-Side Request Forgery in the UpdateCE update endpoint |
| CVE-2026-56660 | GE GetSimpleCMS-CE GetSimpleCMS-CE | 9.1 | Oct 1 | GetSimple CMS: CSRF, SSRF, and Unrestricted Zip Extraction |
| CVE-2026-53953 | GE GetSimpleCMS-CE GetSimpleCMS-CE | 9.1 | Oct 1 | GetSimple CMS: Predictable Password Reset Password Allows Administrator Account Takeover |
| CVE-2026-53952 | GE GetSimpleCMS-CE GetSimpleCMS-CE | 9.8 | Sep 11 | GetSimple CMS & GetSimpleCMS-CE have an Unauthenticated Admin Account Creation via Setup Logic Flaw |
| CVE-2026-28495 | GE GetSimpleCMS-CE GetSimpleCMS-CE | 8.8 | Mar 10 | GetSimple CMS has CSRF to Remote Code Execution via Arbitrary PHP Write in gsconfig.php |
| CVE-2026-26351 | GE GetSimpleCMS-CE GetSimpleCMS-CE | 4.8 | Feb 24 | GetSimpleCMS-CE < 3.3.22 Stored XSS via components.php |
| CVE-2026-27202 | GE GetSimpleCMS-CE GetSimpleCMS-CE | 7.5 | Feb 20 | GetSimple CMS: Uploaded Files (feature) Arbitrary File Read Vulnerability |
| CVE-2026-27161 | GE GetSimpleCMS-CE GetSimpleCMS-CE | 7.5 | Feb 20 | Unauthenticated Information Disclosure via .htaccess Reliance in Sensitive Directories |
| CVE-2026-27147 | GE GetSimpleCMS-CE GetSimpleCMS-CE | 5.4 | Feb 20 | GetSimple CMS: Stored Cross-Site Scripting (XSS) via SVG File Upload (Authenticated) |
| CVE-2026-27146 | GE GetSimpleCMS-CE GetSimpleCMS-CE | 4.5 | Feb 20 | GetSimple CMS: Cross-Site Request Forgery (CSRF) in File Upload Allows Arbitrary Uploads |
| CVE-2025-48492 | GE GetSimpleCMS-CE GetSimpleCMS-CE | 8.8 | May 30 | GetSimple CMS RCE in Edit component |