GCVE - cpe:2.3:a:get-simple:getsimple_cms:3.1.2:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:get-simple:getsimple_cms:3.1.2:*:*:*:*:*:*:*

part: a version: 3.1.2 update: *

Vendor	Get Simple (`8352e898-cb94-58b7-81e1-dfef9dc059d7`)
Product	Getsimple Cms (`efad63c5-f159-58a2-a24e-fc03bb2a628a`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/getsimplecms/getsimplecms`	purl2cpe	2026-06-01 10:16:30.092523

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2017-10673`	vulnerable	2026-06-08 05:08:36.202175	Details available admin/profile.php in GetSimple CMS 3.x has XSS in a name field. Published: 2017-06-29T08:00:00.000Z Updated: 2024-08-05T17:41:55.606Z Open on db.gcve.eu Reference links https://github.com/GetSimpleCMS/GetSimpleCMS/issues/1234	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-8790`	vulnerable	2026-06-08 05:06:10.171812	Details available XML external entity (XXE) vulnerability in admin/api.php in GetSimple CMS 3.1.1 through 3.3.x before 3.3.5 Beta 1, when in certain configurations, allows remote attackers to read arbitrary files via the data parameter. Published: 2015-01-20T15:00:00.000Z Updated: 2024-08-06T13:26:02.694Z Open on db.gcve.eu Reference links http://seclists.org/fulldisclosure/2014/Dec/135 http://packetstormsecurity.com/files/129778/GetSimple-CMS-3.3.4-XML-External-Entity-Injection.html http://get-simple.info/start/changelog/ http://karmainsecurity.com/KIS-2014-17 https://github.com/GetSimpleCMS/GetSimpleCMS/issues/944	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-7243`	vulnerable	2026-06-08 05:05:08.794629	Details available Multiple cross-site scripting (XSS) vulnerabilities in GetSimple CMS 3.1.2 and 3.2.3 allow remote attackers to inject arbitrary web script or HTML via the (1) post-menu field to edit.php or (2) Display name field to settings.php. NOTE: The Custom Permalink Structure and Email Address fields are already covered by CVE-2012-6621. Published: 2014-01-17T15:00:00.000Z Updated: 2024-08-06T18:01:19.746Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/90191 http://packetstormsecurity.com/files/124711 http://osvdb.org/101922	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-6621`	vulnerable	2026-06-08 05:03:01.283285	Details available Multiple cross-site scripting (XSS) vulnerabilities in GetSimple CMS 3.1, 3.1.2, 3.2.3, and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) Email Address or (2) Custom Permalink Structure fields in admin/settings.php; (3) path parameter to admin/upload.php; (4) err parameter to admin/theme.php; (5) error parameter to admin/pages.php; or (6) success or (7) err parameter to admin/index.php. Published: 2014-01-16T21:00:00.000Z Updated: 2024-08-06T21:36:01.861Z Open on db.gcve.eu Reference links http://www.vulnerability-lab.com/get_content.php?id=521 https://exchange.xforce.ibmcloud.com/vulnerabilities/75534 http://packetstormsecurity.com/files/124711 http://packetstormsecurity.org/files/112643/GetSimple-CMS-3.1-Cross-Site-Scripting.html http://www.securityfocus.com/bid/53501	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.