45 matches found
CVE-2024-55088: Cross-Site Request Forgery (CSRF)
GetSimple CMS CE 3.3.19 is vulnerable to Server-Side Request Forgery SSRF in the backend plugin module...
CVE-2024-55086: Server-Side Request Forgery (SSRF)
In the GetSimple CMS CE 3.3.19 management page, Server-Side Request Forgery SSRF can be achieved in the plug-in download address in the backend management system...
CVE-2024-55085: Improper Control of Generation of Code
GetSimple CMS CE 3.3.19 suffers from arbitrary code execution in the template editing function in the background management system, which can be used by an attacker to implement RCE...
CVE-2024-55085
GetSimple CMS CE 3.3.19 suffers from arbitrary code execution in the template editing function in the background management system, which can be used by an attacker to implement RCE...
PT-2024-36473
Name of the Vulnerable Software and Affected Versions GetSimple CMS CE version 3.3.19 Description The issue concerns arbitrary code execution in the template editing function within the background management system. This can be exploited by an attacker to implement Remote Code Execution RCE...