Security: GetSimpleCMS-CE/GetSimpleCMS-CE
Security
No security policy detected
This project has not set up a SECURITY.md file yet.
Report a vulnerability-
Stored Cross-Site Scripting (XSS) via the "title" parameter in admin/components.phpGHSA-vqfh-838q-xfqh published
Aug 7, 2026 by GetSimpleCMS-CEHigh -
Authenticated Stored Local File Inclusion (LFI) via page "template" fieldGHSA-559q-hqrv-m84x published
Aug 6, 2026 by GetSimpleCMS-CEHigh -
Authenticated Stored XSS in backup viewer (backup-edit.php) via output decoding of page meta fields and contentGHSA-p6vf-2xr7-mcf4 published
Aug 5, 2026 by GetSimpleCMS-CEHigh -
Missing CSRF protection in UpdateCE allows forging a privileged server-side update requestGHSA-2rxv-4g4m-573w published
Jul 6, 2026 by GetSimpleCMS-CECritical -
Server-Side Request Forgery in the UpdateCE update endpointGHSA-r7v8-mx29-5q8h published
Jul 6, 2026 by GetSimpleCMS-CEHigh -
Predictable Password Reset Password Allows Administrator Account TakeoverGHSA-vvhx-56q2-gcjq published
Jun 11, 2026 by GetSimpleCMS-CECritical -
Unrestricted ZIP Extraction in UpdateCE plugin leads to Remote Code ExecutionGHSA-q5rx-gppg-768r published
Jul 6, 2026 by GetSimpleCMS-CECritical -
Setup Logic FlawGHSA-rw2c-w4mg-46g4 published
Jun 3, 2026 by GetSimpleCMS-CECritical -
CSRF to Remote Code Execution via Arbitrary PHP Write in gsconfig.phpGHSA-92wv-q2jp-qg88 published
Mar 8, 2026 by GetSimpleCMS-CECritical -
Cross-Site Request Forgery (CSRF) in File Upload Allows Arbitrary File UploadGHSA-26rv-8wpp-q84r published
Feb 18, 2026 by GetSimpleCMS-CEHigh
Learn more about advisories related to GetSimpleCMS-CE/GetSimpleCMS-CE in the GitHub Advisory Database