CVE-2026-56660

The GetSimple CMS CE community edition (prior to version 1.5 ) is vulnerable to remote code execution (RCE) due to a flaw in the update handler located in UpdateCE.php . The application downloads and extracts ZIP archives into the web root without validating file types or extraction paths. This a...