Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
get-simple getsimplecms vulnerabilities and exploits
(subscribe to this query)
6.1
CVSSv3
CVE-2021-36601
GetSimpleCMS 3.3.16 contains a cross-site Scripting (XSS) vulnerability, where Function TSL does not filter check settings.php Website URL: "siteURL" parameter.
Get-simple Getsimplecms 3.3.16
5.4
CVSSv3
CVE-2023-46040
Cross Site Scripting vulnerability in GetSimpleCMS v.3.4.0a allows a remote malicious user to execute arbitrary code via the a crafted payload to the components.php function.
Get-simple Getsimplecms 3.4.0
9.8
CVSSv3
CVE-2023-46042
An issue in GetSimpleCMS v.3.4.0a allows a remote malicious user to execute arbitrary code via a crafted payload to the phpinfo().
Get-simple Getsimplecms 3.4.0a
4.8
CVSSv3
CVE-2020-20389
Cross Site Scripting (XSS) vulnerability in GetSimpleCMS 3.4.0a in admin/edit.php.
Get-simple Getsimplecms 3.4.0
6.1
CVSSv3
CVE-2019-9915
GetSimpleCMS 3.3.13 has an Open Redirect via the admin/index.php redirect parameter.
Get-simple. Getsimplecms 3.3.13
9.1
CVSSv3
CVE-2020-18191
GetSimpleCMS-3.3.15 is affected by directory traversal. Remote attackers are able to delete arbitrary files via /GetSimpleCMS-3.3.15/admin/log.php
Get-simple Getsimplecms 3.3.15
9.8
CVSSv3
CVE-2019-11231
An issue exists in GetSimple CMS up to and including 3.3.15. insufficient input sanitation in the theme-edit.php file allows upload of files with arbitrary content (PHP code, for example). This vulnerability is triggered by an authenticated user; however, authentication can be by...
Get-simple Getsimple Cms
1 EDB exploit
3.8
CVSSv3
CVE-2018-19421
In GetSimpleCMS 3.3.15, admin/upload.php blocks .html uploads but Internet Explorer render HTML elements in a .eml file, because of admin/upload-uploadify.php, and validate_safe_file in admin/inc/security_functions.php.
Get-simple Getsimple Cms 3.3.15
3.8
CVSSv3
CVE-2018-19420
In GetSimpleCMS 3.3.15, admin/upload.php blocks .html uploads but there are several alternative cases in which HTML can be executed, such as a file with no extension or an unrecognized extension (e.g., the test or test.asdf filename), because of admin/upload-uploadify.php, and va...
Get-simple Getsimple Cms 3.3.15
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
authentication bypass
CVE-2024-30043
camera
CVE-2023-40404
CVE-2024-2793
client side
CVE-2024-4469
CVE-2024-3565
CVE-2024-29825
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2