CVE-2023-6188

GetSimpleCMS 3.3.16/3.4.0a exposes a vulnerability in /admin/theme-edit.php allowing code injection. The issue can be triggered remotely; public exploit activity is noted. Mitigation per PT-2023-32557: restrict access to /admin/theme-edit.php or avoid using theme-edit.php until a patch is availab...

CVE-2023-6188 GetSimpleCMS theme-edit.php code injection

A vulnerability was found in GetSimpleCMS 3.3.16/3.4.0a. It has been rated as critical. This issue affects some unknown processing of the file /admin/theme-edit.php. The manipulation leads to code injection. The attack may be initiated remotely. The exploit has been disclosed to the public and ma...

CVE-2023-6188 GetSimpleCMS theme-edit.php code injection

A vulnerability was found in GetSimpleCMS 3.3.16/3.4.0a. It has been rated as critical. This issue affects some unknown processing of the file /admin/theme-edit.php. The manipulation leads to code injection. The attack may be initiated remotely. The exploit has been disclosed to the public and ma...

CVE-2023-6188 GetSimpleCMS theme-edit.php code injection

A vulnerability was found in GetSimpleCMS 3.3.16/3.4.0a. It has been rated as critical. This issue affects some unknown processing of the file /admin/theme-edit.php. The manipulation leads to code injection. The attack may be initiated remotely. The exploit has been disclosed to the public and ma...

GetSimpleCMS Security Vulnerability

GetSimpleCMS is a content management system for individual developers. A security vulnerability exists in GetSimpleCMS version 3.3.16, 3.4.0a. An attacker exploited the vulnerability to cause code injection...

CVE-2023-6188: Improper Control of Generation of Code

A vulnerability was found in GetSimpleCMS 3.3.16/3.4.0a. It has been rated as critical. This issue affects some unknown processing of the file /admin/theme-edit.php. The manipulation leads to code injection. The attack may be initiated remotely. The exploit has been disclosed to the public and ma...

PT-2023-32557 · Unknown · Getsimple Cms

Name of the Vulnerable Software and Affected Versions: GetSimpleCMS versions 3.3.16 through 3.4.0a Description: A critical issue affects the processing of the file /admin/theme-edit.php, leading to code injection. The attack can be initiated remotely. Recommendations: For versions 3.3.16 through...

GetSimpleCMS Cross-Site Scripting Vulnerability

GetSimpleCMS is a content management system for individual developers. A cross-site scripting vulnerability exists in GetSimpleCMS version v3.4.0a, which stems from the application's lack of effective filtering and escaping of user-supplied data, and can be exploited by a remote attacker to execu...

CVE-2023-46040

Cross Site Scripting vulnerability in GetSimpleCMS v.3.4.0a allows a remote attacker to execute arbitrary code via the a crafted payload to the components.php function...

Cross site scripting

Cross Site Scripting vulnerability in GetSimpleCMS v.3.4.0a allows a remote attacker to execute arbitrary code via the a crafted payload to the components.php function...

CVE-2023-46040

Cross Site Scripting vulnerability in GetSimpleCMS v.3.4.0a allows a remote attacker to execute arbitrary code via the a crafted payload to the components.php function...

GetSimpleCMS 跨站脚本漏洞

GetSimpleCMS is a content management system for individual developers. A cross-site scripting vulnerability exists in GetSimpleCMS version v3.4.0a, which stems from the application's lack of effective filtering and escaping of user-supplied data, and can be exploited by a remote attacker to execu...

PT-2023-29811 · Unknown · Getsimple Cms

Name of the Vulnerable Software and Affected Versions: GetSimpleCMS version 3.4.0a Description: A Cross Site Scripting issue allows a remote attacker to execute arbitrary code by sending a crafted payload to the components.php function. Recommendations: For GetSimpleCMS version 3.4.0a, consider...

CVE-2023-46040: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in GetSimpleCMS v.3.4.0a allows a remote attacker to execute arbitrary code via the a crafted payload to the components.php function...

CVE-2023-46040

Cross Site Scripting vulnerability in GetSimpleCMS v.3.4.0a allows a remote attacker to execute arbitrary code via the a crafted payload to the components.php function...

CVE-2023-46040

GetSimpleCMS, version 3.4.0a, contains a Cross-Site Scripting vulnerability that allows a remote attacker to execute arbitrary code via a crafted payload to the components.php function. The issue is documented across multiple sources (CVE-2023-46040) and is categorized as CVSS 3.1: Medium (ATT&CK...

CVE-2023-46042

An issue in GetSimpleCMS v.3.4.0a allows a remote attacker to execute arbitrary code via a crafted payload to the phpinfo...

CVE-2023-46042

An issue in GetSimpleCMS v.3.4.0a allows a remote attacker to execute arbitrary code via a crafted payload to the phpinfo...

Design/Logic Flaw

An issue in GetSimpleCMS v.3.4.0a allows a remote attacker to execute arbitrary code via a crafted payload to the phpinfo...

GetSimpleCMS Security Vulnerability

GetSimpleCMS is a content management system for individual developers. A security vulnerability exists in GetSimpleCMS version v.3.4.0a, which can be exploited to execute arbitrary code via phpinfo...