Approved changes feed: RSS · Atom

cpe:2.3:a:get-simple:getsimple_cms:3.3.16:*:*:*:*:*:*:*

part: a version: 3.3.16 update: *

VendorGet Simple (8352e898-cb94-58b7-81e1-dfef9dc059d7)
ProductGetsimple Cms (efad63c5-f159-58a2-a24e-fc03bb2a628a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-41544 vulnerable 2026-06-08 05:48:30.469711 Details available
GetSimple CMS v3.3.16 was discovered to contain a remote code execution (RCE) vulnerability via the edited_file parameter in admin/theme-edit.php.
Published: 2022-10-18T00:00:00.000Z
Updated: 2025-05-13T19:23:50.244Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-24861 vulnerable 2026-06-08 05:22:35.677148 Details available
GetSimple CMS 3.3.16 allows in parameter 'permalink' on the Settings page persistent Cross Site Scripting which is executed when you create and open a new page
Published: 2020-10-01T13:50:19.000Z
Updated: 2024-08-04T15:19:09.428Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-23839 vulnerable 2026-06-08 05:22:32.141495 Details available
A Reflected Cross-Site Scripting (XSS) vulnerability in GetSimple CMS v3.3.16, in the admin/index.php login portal webpage, allows remote attackers to execute JavaScript code in the client's browser and harvest login credentials after a client clicks a link, enters credentials, and submits the login form.
Published: 2020-09-01T16:40:11.000Z
Updated: 2024-08-04T15:05:11.396Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.