Getsimplecms-Ce
7 CVEs across 1 Getsimplecms-Ce products. Browse Getsimplecms-Ce vulnerabilities, severities, and proof-of-concept exploits.
Getsimplecms-Ce products with known CVEs
Getsimplecms-Ce CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2026-28495 | Critical | 9.6 | 2026-03-10 | GetSimple CMS is a content management system. The massiveAdmin plugin (v6.0.3) bundled with GetSimpleCMS-CE v3.3.22 allows an authenticated administrator to ov… |
CVE-2026-26351 | Medium | 4.8 | 2026-02-24 | GetSimpleCMS Community Edition (CE) versions prior to 3.3.22 (3.3.16 tested) contains a stored cross-site scripting (XSS) vulnerability in the Theme to Compone… |
CVE-2026-27202 | High | 7.5 | 2026-02-21 | GetSimple CMS is a content management system. All versions of GetSimple CMS have a flaw in the Uploaded Files feature that allows for arbitrary file reads. Thi… |
CVE-2026-27161 | High | 7.5 | 2026-02-21 | GetSimple CMS is a content management system. All versions of GetSimple CMS rely on .htaccess files to restrict access to sensitive directories such as /data/… |
CVE-2026-27147 | Medium | 5.4 | 2026-02-21 | GetSimple CMS is a content management system. All versions of GetSimple CMS are vulnerable to XSS through SVG file uploads. Authenticated users can upload SVG… |
CVE-2026-27146 | Medium | 4.5 | 2026-02-21 | GetSimple CMS is a content management system. All versions of GetSimple CMS do not implement CSRF protection on the administrative file upload endpoint. As a r… |
CVE-2025-48492 | High | 8.8 | 2025-05-30 | GetSimple CMS is a content management system. In versions starting from 3.3.16 to 3.3.21, an authenticated user with access to the Edit component can inject ar… |