Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
get-simple vulnerabilities and exploits
(subscribe to this query)
4.8
CVSSv3
CVE-2021-28977
Cross Site Scripting vulnerability in GetSimpleCMS 3.3.16 in admin/upload.php by adding comments or jpg and other file header information to the content of xla, pages, and gzip files,
Get-simple Getsimplecms
5.4
CVSSv3
CVE-2023-51246
A Cross Site Scripting (XSS) vulnerability in GetSimple CMS 3.3.16 exists when using Source Code Mode as a backend user to add articles via the /admin/edit.php page.
Get-simple Getsimplecms 3.3.16
5.4
CVSSv3
CVE-2020-20391
Cross Site Scripting vulnerability in GetSimpleCMS 3.4.0a in admin/snippets.php via (1) Add Snippet and (2) Save snippets.
Get-simple Getsimplecms 3.4.0
5.4
CVSSv3
CVE-2020-21353
A stored cross site scripting (XSS) vulnerability in /admin/snippets.php of GetSimple CMS 3.4.0a allows malicious users to execute arbitrary web scripts or HTML via crafted payload in the Edit Snippets module.
Get-simple Getsimplecms 3.4.0a
9.8
CVSSv3
CVE-2019-11231
An issue exists in GetSimple CMS up to and including 3.3.15. insufficient input sanitation in the theme-edit.php file allows upload of files with arbitrary content (PHP code, for example). This vulnerability is triggered by an authenticated user; however, authentication can be by...
Get-simple Getsimple Cms
1 EDB exploit
5.4
CVSSv3
CVE-2022-1503
A vulnerability, which was classified as problematic, has been found in GetSimple CMS. Affected by this issue is the file /admin/edit.php of the Content Module. The manipulation of the argument post-content with an input like <script>alert(1)</script> leads to cross s...
Get-simple Getsimple Cms -
NA
CVE-2015-5355
Multiple cross-site scripting (XSS) vulnerabilities in GetSimple CMS prior to 3.3.6 allow remote malicious users to inject arbitrary web script or HTML via the (1) post-content or (2) post-title parameter to admin/edit.php.
Get-simple Getsimple Cms
6.1
CVSSv3
CVE-2021-36601
GetSimpleCMS 3.3.16 contains a cross-site Scripting (XSS) vulnerability, where Function TSL does not filter check settings.php Website URL: "siteURL" parameter.
Get-simple Getsimplecms 3.3.16
5.4
CVSSv3
CVE-2023-46040
Cross Site Scripting vulnerability in GetSimpleCMS v.3.4.0a allows a remote malicious user to execute arbitrary code via the a crafted payload to the components.php function.
Get-simple Getsimplecms 3.4.0
9.8
CVSSv3
CVE-2023-46042
An issue in GetSimpleCMS v.3.4.0a allows a remote malicious user to execute arbitrary code via a crafted payload to the phpinfo().
Get-simple Getsimplecms 3.4.0a
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
authentication bypass
CVE-2024-30043
camera
CVE-2023-40404
CVE-2024-2793
client side
CVE-2024-4469
CVE-2024-3565
CVE-2024-29825
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
NEXT »