Show filters
3 Total Results
Displaying 1-3 of 3
Sort by:
Attacker Value
Unknown

CVE-2022-41544

Disclosure Date: October 18, 2022 (last updated October 08, 2023)
GetSimple CMS v3.3.16 was discovered to contain a remote code execution (RCE) vulnerability via the edited_file parameter in admin/theme-edit.php.
Attacker Value
Unknown

CVE-2020-24861

Disclosure Date: October 01, 2020 (last updated February 22, 2025)
GetSimple CMS 3.3.16 allows in parameter 'permalink' on the Settings page persistent Cross Site Scripting which is executed when you create and open a new page
Attacker Value
Unknown

CVE-2020-23839

Disclosure Date: September 01, 2020 (last updated February 22, 2025)
A Reflected Cross-Site Scripting (XSS) vulnerability in GetSimple CMS v3.3.16, in the admin/index.php login portal webpage, allows remote attackers to execute JavaScript code in the client's browser and harvest login credentials after a client clicks a link, enters credentials, and submits the login form.