GCVE - cpe:2.3:a:get-simple:getsimple_cms:2.01:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:get-simple:getsimple_cms:2.01:*:*:*:*:*:*:*

part: a version: 2.01 update: *

Vendor	Get Simple (`8352e898-cb94-58b7-81e1-dfef9dc059d7`)
Product	Getsimple Cms (`efad63c5-f159-58a2-a24e-fc03bb2a628a`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/getsimplecms/getsimplecms`	purl2cpe	2026-06-01 10:16:30.092515

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2012-6621`	vulnerable	2026-06-08 05:03:01.280428	Details available Multiple cross-site scripting (XSS) vulnerabilities in GetSimple CMS 3.1, 3.1.2, 3.2.3, and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) Email Address or (2) Custom Permalink Structure fields in admin/settings.php; (3) path parameter to admin/upload.php; (4) err parameter to admin/theme.php; (5) error parameter to admin/pages.php; or (6) success or (7) err parameter to admin/index.php. Published: 2014-01-16T21:00:00.000Z Updated: 2024-08-06T21:36:01.861Z Open on db.gcve.eu Reference links http://www.vulnerability-lab.com/get_content.php?id=521 https://exchange.xforce.ibmcloud.com/vulnerabilities/75534 http://packetstormsecurity.com/files/124711 http://packetstormsecurity.org/files/112643/GetSimple-CMS-3.1-Cross-Site-Scripting.html http://www.securityfocus.com/bid/53501	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-5052`	vulnerable	2026-06-08 04:56:31.683012	Details available Cross-site scripting (XSS) vulnerability in admin/components.php in GetSimple CMS 2.01 allows remote attackers to inject arbitrary web script or HTML via the val[] parameter. Published: 2011-11-23T01:00:00.000Z Updated: 2024-08-07T04:09:38.272Z Open on db.gcve.eu Reference links http://www.securityfocus.com/archive/1/511458/100/0/threaded http://www.htbridge.ch/advisory/xss_vulnerability_in_getsimple_cms.html http://www.securityfocus.com/bid/40374	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-4863`	vulnerable	2026-06-08 04:56:31.280330	Details available Cross-site scripting (XSS) vulnerability in admin/changedata.php in GetSimple CMS 2.01 allows remote attackers to inject arbitrary web script or HTML via the post-title parameter. Published: 2011-10-05T10:00:00.000Z Updated: 2024-08-07T04:02:29.808Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/43593 http://securityreason.com/securityalert/8420 http://packetstormsecurity.org/1009-exploits/getsimplecms201-xss.txt https://exchange.xforce.ibmcloud.com/vulnerabilities/62177 http://www.securityfocus.com/archive/1/514043/100/0/threaded	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.