Skip to content
OpenAdvisories

Vendor

GetSimpleCMS-CE

15 known vulnerabilities.

Products

GetSimpleCMS-CE 15
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.8
    CVE-2026-26351

    GetSimpleCMS-CE < 3.3.22 Stored XSS via components.php

    GetSimpleCMS Community Edition (CE) versions prior to 3.3.22 (3.3.16 tested) contains a stored cross-site scripting (XSS) vulnerability in the Theme to Components functionality within components.php. User-supplied input provided to the "slug" field of a compo…

    GetSimpleCMS-CE GetSimpleCMS-CE
  • Medium 6.9
    CVE-2026-27147

    GetSimple CMS: Stored Cross-Site Scripting (XSS) via SVG File Upload (Authenticated)

    GetSimple CMS is a content management system. All versions of GetSimple CMS are vulnerable to XSS through SVG file uploads. Authenticated users can upload SVG files via the administrative upload functionality, but they are not properly sanitized or restricted…

    GetSimpleCMS-CE GetSimpleCMS-CE