CVE-2026-56660

The GetSimple CMS CE community edition (prior to version 1.5 ) is vulnerable to remote code execution (RCE) due to a flaw in the update handler located in UpdateCE.php . The application downloads and extracts ZIP archives into the web root without validating file types or extraction paths. This a...

EUVD-2026-91016

GetSimple CMS is a content management system CMS, and GetSimple CMS CE is the community edition of that CMS. Prior to version 1.5, the update handler in UpdateCE.php downloads a ZIP archive and extracts its contents into the web root without validating file types or extraction paths. Because PHP...