Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

GetSimpleCMS-CE — Vulnerabilities & Security Advisories 15

Browse all 15 CVE security advisories affecting GetSimpleCMS-CE. AI-powered Chinese analysis, POCs, and references for each vulnerability.

GetSimpleCMS-CE serves as a lightweight content management system for small websites and personal blogs, prioritizing simplicity over advanced features. Historically, it has been susceptible to multiple security vulnerabilities including remote code execution, cross-site scripting, and privilege escalation, contributing to its seven recorded CVEs. The platform's minimal design often results in limited input validation and insufficient access controls, creating attack vectors for unauthorized administrative access. While no major public security incidents have been widely documented, the consistent discovery of vulnerabilities suggests ongoing security challenges that require diligent maintenance and prompt patching by users to mitigate potential compromises.

Found 15 results / 15 Clear Filters
Top products by GetSimpleCMS-CE: GetSimpleCMS-CE
CVE ID Title CVSS Severity Published
CVE-2026-71542 GetSimple CMS: Stored Cross-Site Scripting (XSS) via the "title" parameter in admin/components.php — GetSimpleCMS-CE CWE-79 8.7 High 2026-10-01
CVE-2026-71426 GetSimple CMS: Authenticated Stored Local File Inclusion (LFI) via page "template" field — GetSimpleCMS-CE CWE-22 7.1 High 2026-10-01
CVE-2026-70650 GetSimple CMS: Authenticated Stored XSS in backup viewer (backup-edit.php) via output decoding of page meta fields and content — GetSimpleCMS-CE CWE-79 8.8 High 2026-10-01
CVE-2026-56662 GetSimple CMS: Missing CSRF protection in UpdateCE allows forging a privileged server-side update request — GetSimpleCMS-CE CWE-352 9.6 Critical 2026-10-01
CVE-2026-56661 GetSimple CMS: Server-Side Request Forgery in the UpdateCE update endpoint — GetSimpleCMS-CE CWE-918 7.5 High 2026-10-01
CVE-2026-56660 GetSimple CMS: CSRF, SSRF, and Unrestricted Zip Extraction — GetSimpleCMS-CE CWE-352 9.1 Critical 2026-10-01
CVE-2026-53953 GetSimple CMS: Predictable Password Reset Password Allows Administrator Account Takeover — GetSimpleCMS-CE CWE-338 9.1 Critical 2026-10-01
CVE-2026-53952 GetSimple CMS & GetSimpleCMS-CE have an Unauthenticated Admin Account Creation via Setup Logic Flaw — GetSimpleCMS-CE CWE-285 9.8 Critical 2026-09-11
CVE-2026-28495 GetSimple CMS has CSRF to Remote Code Execution via Arbitrary PHP Write in gsconfig.php — GetSimpleCMS-CE CWE-352 9.7 Critical 2026-03-10
CVE-2026-26351 GetSimpleCMS-CE < 3.3.22 Stored XSS via components.php — GetSimpleCMS-CE CWE-79 4.8 - 2026-02-24
CVE-2026-27202 GetSimple CMS: Uploaded Files (feature) Arbitrary File Read Vulnerability — GetSimpleCMS-CE CWE-23 6.5AI Medium AI 2026-02-20
CVE-2026-27161 Unauthenticated Information Disclosure via .htaccess Reliance in Sensitive Directories — GetSimpleCMS-CE CWE-200 5.9AI Medium AI 2026-02-20
CVE-2026-27147 GetSimple CMS: Stored Cross-Site Scripting (XSS) via SVG File Upload (Authenticated) — GetSimpleCMS-CE CWE-79 5.4AI Medium AI 2026-02-20
CVE-2026-27146 GetSimple CMS: Cross-Site Request Forgery (CSRF) in File Upload Allows Arbitrary Uploads — GetSimpleCMS-CE CWE-352 8.8AI High AI 2026-02-20
CVE-2025-48492 GetSimple CMS RCE in Edit component — GetSimpleCMS-CE CWE-77 8.8AI High AI 2025-05-30

This page lists every published CVE security advisory associated with GetSimpleCMS-CE. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.