Show filters
6 Total Results
Displaying 1-6 of 6
Sort by:
Attacker Value
Unknown
CVE-2023-6188
Disclosure Date: November 17, 2023 (last updated November 25, 2023)
A vulnerability was found in GetSimpleCMS 3.3.16/3.4.0a. It has been rated as critical. This issue affects some unknown processing of the file /admin/theme-edit.php. The manipulation leads to code injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-245735.
0
Attacker Value
Unknown
CVE-2023-46040
Disclosure Date: October 31, 2023 (last updated November 08, 2023)
Cross Site Scripting vulnerability in GetSimpleCMS v.3.4.0a allows a remote attacker to execute arbitrary code via the a crafted payload to the components.php function.
0
Attacker Value
Unknown
CVE-2023-46042
Disclosure Date: October 19, 2023 (last updated October 26, 2023)
An issue in GetSimpleCMS v.3.4.0a allows a remote attacker to execute arbitrary code via a crafted payload to the phpinfo().
0
Attacker Value
Unknown
CVE-2020-21353
Disclosure Date: August 06, 2021 (last updated February 23, 2025)
A stored cross site scripting (XSS) vulnerability in /admin/snippets.php of GetSimple CMS 3.4.0a allows attackers to execute arbitrary web scripts or HTML via crafted payload in the Edit Snippets module.
0
Attacker Value
Unknown
CVE-2020-20389
Disclosure Date: June 23, 2021 (last updated February 22, 2025)
Cross Site Scripting (XSS) vulnerability in GetSimpleCMS 3.4.0a in admin/edit.php.
0
Attacker Value
Unknown
CVE-2020-20391
Disclosure Date: June 23, 2021 (last updated February 22, 2025)
Cross Site Scripting vulnerability in GetSimpleCMS 3.4.0a in admin/snippets.php via (1) Add Snippet and (2) Save snippets.
0
