Skip to content
Noroxi

Get-Simple records

47 published records for vendor get-simple.

Researcher profile

Entered KEV
0 · 0%
Weaponized
2 · 4.3%
Pre-auth RCE
5
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 17
  2. 18
  3. 19
  4. 20
  5. 21
  6. 22
  7. 23
  8. 24
  9. 25
  10. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

47 records
  • CVE-2019-11231
    60This week

    An issue was discovered in GetSimple CMS through 3.3.15.

    CriticalCVSS 9.8WeaponizedEPSS 72%

    get-simple · getsimple cmsMay 22, 2019

  • CVE-2023-46042
    46Plan

    An issue in GetSimpleCMS v.3.4.0a allows a remote attacker to execute arbitrary code via a crafted payload to the phpinfo().

    CriticalCVSS 9.8No exploitEPSS 23%

    get-simple · getsimplecmsOct 19, 2023

  • CVE-2022-41544
    42Plan

    GetSimple CMS v3.3.16 was discovered to contain a remote code execution (RCE) vulnerability via the edited_file parameter in admin/theme-edi

    CriticalCVSS 9.8Proof of conceptEPSS 11%

    get-simple · getsimple cmsOct 18, 2022

  • CVE-2023-6188
    39Monitor

    GetSimpleCMS theme-edit.php code injection

    CriticalCVSS 9.8No exploitEPSS 1%

    get-simple · getsimplecmsNov 17, 2023

  • CVE-2020-18191
    37Monitor

    GetSimpleCMS-3.3.15 is affected by directory traversal.

    CriticalCVSS 9.1No exploitEPSS 2%

    get-simple · getsimplecmsOct 2, 2020

  • CVE-2013-10032
    35Monitor

    GetSimple CMS 3.2.1 Authenticated RCE via Arbitrary PHP File Upload

    HighCVSS 8.7WeaponizedEPSS 4%

    get-simple · getsimplecmsJul 25, 2025

  • CVE-2018-17103
    35Monitor

    An issue was discovered in GetSimple CMS v3.3.13.

    HighCVSS 8.8No exploitEPSS 1%

    get-simple · getsimple cmsSep 16, 2018

  • CVE-2014-8722
    34Monitor

    GetSimple CMS 3.3.4 allows remote attackers to obtain sensitive information via a direct request to (1) data/users/<username>.xml, (2) backu

    HighCVSS 7.5Proof of conceptEPSS 14%

    get-simple · getsimple cmsMar 17, 2017

  • CVE-2021-47778
    34Monitor

    GetSimple CMS My SMTP Contact Plugin 1.1.2 - PHP Code Injection

    HighCVSS 8.6No exploitEPSS 1%

    get-simple · getsimplecmsJan 21, 2026

  • CVE-2021-47860
    34Monitor

    GetSimple CMS Custom JS 0.1 - CSRF to XSS to RCE

    HighCVSS 8.5No exploitEPSS 0%

    get-simple · getsimplecmsJan 21, 2026

  • CVE-2021-28976
    30Monitor

    Remote Code Execution vulnerability in GetSimpleCMS before 3.3.16 in admin/upload.php via phar filess.

    HighCVSS 7.2Proof of conceptEPSS 8%

    get-simple · getsimplecmsJun 23, 2021

  • CVE-2020-23839
    27Monitor

    A Reflected Cross-Site Scripting (XSS) vulnerability in GetSimple CMS v3.3.16, in the admin/index.php login portal webpage, allows remote at

    MediumCVSS 6.1Proof of conceptEPSS 10%

    get-simple · getsimple cmsSep 1, 2020

  • CVE-2024-11125
    27Monitor

    GetSimpleCMS profile.php cross-site request forgery

    MediumCVSS 6.9No exploitEPSS 0%

    get-simple · getsimplecmsNov 12, 2024

  • CVE-2018-9173
    25Monitor

    Cross-site scripting (XSS) vulnerability in admin/template/js/uploadify/uploadify.swf in GetSimple CMS 3.3.13 allows remote attackers to inj

    MediumCVSS 6.1Proof of conceptEPSS 2%

    get-simple · getsimple cmsApr 1, 2018

  • CVE-2020-18658
    24Monitor

    Cross Site Scriptiong (XSS) vulnerability in GetSimpleCMS <=3.3.15 via the timezone parameter to settings.php.

    MediumCVSS 6.1No exploitEPSS 1%

    get-simple · getsimplecmsJun 23, 2021

  • CVE-2020-18657
    24Monitor

    Cross Site Scripting (XSS) vulnerability in GetSimpleCMS <= 3.3.15 in admin/changedata.php via the redirect_url parameter and the headers_se

    MediumCVSS 6.1No exploitEPSS 1%

    get-simple · getsimplecmsJun 23, 2021

  • CVE-2020-18659
    24Monitor

    Cross Site Scripting vulnerability in GetSimpleCMS <=3.3.15 via the (1) sitename, (2) username, and (3) email parameters to /admin/setup.php

    MediumCVSS 6.1No exploitEPSS 1%

    get-simple · getsimplecmsJun 23, 2021

  • CVE-2020-18660
    24Monitor

    GetSimpleCMS <=3.3.15 has an open redirect in admin/changedata.php via the redirect function to the url parameter.

    MediumCVSS 6.1No exploitEPSS 1%

    get-simple · getsimplecmsJun 23, 2021

  • CVE-2013-1420
    24Monitor

    Multiple cross-site scripting (XSS) vulnerabilities in GetSimple CMS before 3.2.1 allow remote attackers to inject arbitrary web script or H

    MediumCVSS 6.1No exploitEPSS 1%

    get-simple · getsimple cmsJan 2, 2020

  • CVE-2021-36601
    24Monitor

    GetSimpleCMS 3.3.16 contains a cross-site Scripting (XSS) vulnerability, where Function TSL does not filter check settings.php Website URL:

    MediumCVSS 6.1No exploitEPSS 1%

    get-simple · getsimplecmsAug 10, 2021

  • CVE-2018-16325
    24Monitor

    There is XSS in GetSimple CMS 3.4.0.9 via the admin/edit.php title field.

    MediumCVSS 6.1No exploitEPSS 1%

    get-simple · getsimple cmsSep 1, 2018

  • CVE-2017-10673
    24Monitor

    admin/profile.php in GetSimple CMS 3.x has XSS in a name field.

    MediumCVSS 6.1No exploitEPSS 1%

    get-simple · getsimple cmsJun 29, 2017

  • CVE-2014-8790
    21Monitor

    XML external entity (XXE) vulnerability in admin/api.php in GetSimple CMS 3.1.1 through 3.3.x before 3.3.5 Beta 1, when in certain configura

    MediumCVSS 5.0No exploitEPSS 3%

    cagintranetworks · getsimple cmsJan 20, 2015

  • CVE-2014-8723
    21Monitor

    GetSimple CMS 3.3.4 allows remote attackers to obtain sensitive information via a direct request to (1) plugins/anonymous_data.php or (2) pl

    MediumCVSS 5.3No exploitEPSS 1%

    get-simple · getsimple cmsMar 17, 2017

  • CVE-2020-24861
    21Monitor

    GetSimple CMS 3.3.16 allows in parameter 'permalink' on the Settings page persistent Cross Site Scripting which is executed when you create

    MediumCVSS 5.4No exploitEPSS 1%

    get-simple · getsimple cmsOct 1, 2020