Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

GetSimpleCMS-CE — Vulnerabilities & Security Advisories 15

All 15 CVE vulnerabilities found in GetSimpleCMS-CE, with AI-generated Chinese analysis, references, and POCs.

This page documents known Common Weakness Enumeration (CWE) vulnerabilities affecting GetSimpleCMS-CE, a content management system developed by the GetSimple community. The collection includes security flaws ranging from remote code execution and cross-site scripting to path traversal and insecure direct object references within the GetSimpleCMS-CE ecosystem. This resource aggregates data covering vulnerability disclosures and associated advisories from January 2013 to the present day, ensuring a comprehensive view of historical and recent security incidents. Users can utilize this page to track vendor security advisories from the GetSimple community, gaining insight into how specific issues were reported and resolved over time. Additionally, the content allows for a deeper understanding of specific weakness classes as they manifest in this particular product, highlighting common attack vectors and mitigation strategies. Visitors can also look up the complete vulnerability history of GetSimpleCMS-CE, observing trends in security hygiene and the frequency of critical updates. This structured overview serves as a reference for security researchers, system administrators, and developers seeking to assess the risk posture of their installations. By centralizing these details, the page facilitates informed decision-making regarding patch management and system hardening. The focus remains strictly on factual reporting of identified weaknesses and their impact on the software’s integrity and confidentiality. This approach ensures that stakeholders have access to reliable information without distraction from unrelated content or promotional material. The aggregation aims to support transparency and improve the overall security landscape for users of this open-source content management platform.

Vendor: GetSimpleCMS-CE

CVE ID Title CVSS Severity Published
CVE-2026-71542 GetSimple CMS: Stored Cross-Site Scripting (XSS) via the "title" parameter in admin/components.php CWE-79 8.7 High 2026-10-01
CVE-2026-71426 GetSimple CMS: Authenticated Stored Local File Inclusion (LFI) via page "template" field CWE-22 7.1 High 2026-10-01
CVE-2026-70650 GetSimple CMS: Authenticated Stored XSS in backup viewer (backup-edit.php) via output decoding of page meta fields and content CWE-79 8.8 High 2026-10-01
CVE-2026-56662 GetSimple CMS: Missing CSRF protection in UpdateCE allows forging a privileged server-side update request CWE-352 9.6 Critical 2026-10-01
CVE-2026-56661 GetSimple CMS: Server-Side Request Forgery in the UpdateCE update endpoint CWE-918 7.5 High 2026-10-01
CVE-2026-56660 GetSimple CMS: CSRF, SSRF, and Unrestricted Zip Extraction CWE-352 9.1 Critical 2026-10-01
CVE-2026-53953 GetSimple CMS: Predictable Password Reset Password Allows Administrator Account Takeover CWE-338 9.1 Critical 2026-10-01
CVE-2026-53952 GetSimple CMS & GetSimpleCMS-CE have an Unauthenticated Admin Account Creation via Setup Logic Flaw CWE-285 9.8 Critical 2026-09-11
CVE-2026-28495 GetSimple CMS has CSRF to Remote Code Execution via Arbitrary PHP Write in gsconfig.php CWE-352 9.7 Critical 2026-03-10
CVE-2026-26351 GetSimpleCMS-CE < 3.3.22 Stored XSS via components.php CWE-79 4.8 - 2026-02-24
CVE-2026-27202 GetSimple CMS: Uploaded Files (feature) Arbitrary File Read Vulnerability CWE-23 6.5AI Medium AI 2026-02-20
CVE-2026-27161 Unauthenticated Information Disclosure via .htaccess Reliance in Sensitive Directories CWE-200 5.9AI Medium AI 2026-02-20
CVE-2026-27147 GetSimple CMS: Stored Cross-Site Scripting (XSS) via SVG File Upload (Authenticated) CWE-79 5.4AI Medium AI 2026-02-20
CVE-2026-27146 GetSimple CMS: Cross-Site Request Forgery (CSRF) in File Upload Allows Arbitrary Uploads CWE-352 8.8AI High AI 2026-02-20
CVE-2025-48492 GetSimple CMS RCE in Edit component CWE-77 8.8AI High AI 2025-05-30

All 15 known CVE vulnerabilities affecting GetSimpleCMS-CE with full Chinese analysis, references, and POCs where available.