GetSimpleCMS vulnerabilities
We track 2 vulnerabilities in GetSimpleCMS products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on September 11, 2026.
2vulnerabilities
2critical
0high
0exploited
9.8average CVSS score
Latest GetSimpleCMS vulnerabilities
- 9.8 Critical severity
GetSimpleCMS-CE: Improper Authorization
GetSimple CMS is a content management system (CMS), and GetSimple CMS CE is the community edition of that CMS. A logic flaw in GetSimple CMS (v3.4.0a and below) and GetSimpleCMS-CE (v3.3.22 and below) allows unauthenticated attackers to create a new administra
- 9.8 Critical severity
GetSimpleCMS: Improper Control of Generation of Code
A vulnerability was found in GetSimpleCMS 3.3.16/3.4.0a. It has been rated as critical. This issue affects some unknown processing of the file /admin/theme-edit.php. The manipulation leads to code injection. The attack may be initiated remotely. The exploit ha