GCVE - cpe:2.3:a:get-simple:getsimplecms:1.1.2:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:get-simple:getsimplecms:1.1.2:*:*:*:*:*:*:*

part: a version: 1.1.2 update: *

Vendor	Get Simple (`8352e898-cb94-58b7-81e1-dfef9dc059d7`)
Product	Getsimplecms (`fa252676-2d75-518c-9e08-8a97cf30a197`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:github/getsimplecms/getsimplecms`	purl2cpe	2026-06-01 10:16:30.082944

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2021-47870`	vulnerable	2026-06-08 05:38:07.817492	GetSimple CMS My SMTP Contact Plugin 1.1.2 - Stored XSS GetSimple CMS My SMTP Contact Plugin 1.1.2 suffers from a Stored Cross-Site Scripting (XSS) vulnerability. The plugin attempts to sanitize user input using htmlspecialchars(), but this can be bypassed by passing dangerous characters as escaped hex bytes. This allows attackers to inject arbitrary client-side code that executes in the administrator's browser when visiting a malicious page. Published: 2026-01-21T17:32:09.385Z Updated: 2026-05-12T20:45:13.761Z Open on db.gcve.eu Reference links https://github.com/boku7/gsSMTP-Csrf2Xss2RCE/ http://get-simple.info https://github.com/GetSimpleCMS/GetSimpleCMS https://www.exploit-db.com/exploits/49798 https://www.vulncheck.com/advisories/getsimple-cms-my-smtp-contact-plugin-stored-xss	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-47778`	vulnerable	2026-06-08 05:38:07.615635	GetSimple CMS My SMTP Contact Plugin 1.1.2 - PHP Code Injection GetSimple CMS My SMTP Contact Plugin 1.1.2 contains a PHP code injection vulnerability. An authenticated administrator can inject arbitrary PHP code through plugin configuration parameters, leading to remote code execution on the server. Published: 2026-01-21T17:29:48.390Z Updated: 2026-07-15T01:24:35.491Z Open on db.gcve.eu Reference links https://www.exploit-db.com/exploits/49774 http://get-simple.info https://github.com/GetSimpleCMS/GetSimpleCMS https://github.com/boku7/gsSMTP-Csrf2Xss2RCE/ https://www.vulncheck.com/advisories/getsimple-cms-my-smtp-contact-plugin-php-code-injection	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.