Description
GetSimple CMS My SMTP Contact Plugin 1.1.2 contains a PHP code injection vulnerability. An authenticated administrator can inject arbitrary PHP code through plugin configuration parameters, leading to remote code execution on the server.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Get-Simple | My SMTP Contact Plugin | 1.1.2 | — |
References
- ExploitDB-49774 exploit
- Vendor Homepage product
- GetSimple CMS GitHub Repository product
- Full Disclosure Repository technical-description exploit
- VulnCheck Advisory: GetSimple CMS My SMTP Contact Plugin 1.1.2 - PHP Code Injection third-party-advisory