Approved changes feed: RSS · Atom

cpe:2.3:a:get-simple:getsimplecms:0.1:*:*:*:*:*:*:*

part: a version: 0.1 update: *

VendorGet Simple (8352e898-cb94-58b7-81e1-dfef9dc059d7)
ProductGetsimplecms (fa252676-2d75-518c-9e08-8a97cf30a197)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/getsimplecms/getsimplecms purl2cpe 2026-06-01 10:16:30.079905

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-47860 vulnerable 2026-06-08 05:38:07.802430 GetSimple CMS Custom JS 0.1 - CSRF to XSS to RCE
MEDIUM (5.3)
GetSimple CMS Custom JS 0.1 plugin contains a cross-site request forgery vulnerability that allows unauthenticated attackers to inject arbitrary client-side code into administrator browsers. Attackers can craft a malicious website that triggers a cross-site scripting payload to execute remote code on the hosting server when an authenticated administrator visits the page.
Published: 2026-01-21T17:29:56.337Z
Updated: 2026-04-07T14:06:20.133Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.