GCVE - cpe:2.3:a:getsimple-ce:getsimple

Approved changes feed: RSS · Atom

cpe:2.3:a:getsimple-ce:getsimple_cms:0.1:*:*:*:*:*:*:*

part: a version: 0.1 update: *

Vendor	Getsimple Ce (`6f1c45cb-f23a-5965-a447-28449f0de52e`)
Product	Getsimple Cms (`ad4ecaa4-6bb7-5bbd-bd0e-6e1999a1c886`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2021-47860`	vulnerable	2026-06-08 05:38:07.801886	GetSimple CMS Custom JS 0.1 - CSRF to XSS to RCE MEDIUM (5.3) GetSimple CMS Custom JS 0.1 plugin contains a cross-site request forgery vulnerability that allows unauthenticated attackers to inject arbitrary client-side code into administrator browsers. Attackers can craft a malicious website that triggers a cross-site scripting payload to execute remote code on the hosting server when an authenticated administrator visits the page. Published: 2026-01-21T17:29:56.337Z Updated: 2026-04-07T14:06:20.133Z Open on db.gcve.eu Reference links https://www.exploit-db.com/exploits/49816 http://get-simple.info https://github.com/GetSimpleCMS/GetSimpleCMS https://github.com/boku7/gsCMS-CustomJS-Csrf2Xss2Rce https://www.exploit-db.com/exploits/49712	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open this panel to browse, search, copy or download the JSON record.