468 matches found
GetSimple CMS Cross-Site Request Forgery Vulnerability
GetSimple CMS is an open-source content management system developed by GetSimple CMS. Version 1.1.1 of GetSimple CMS contains a cross-site request forgeing vulnerability. This vulnerability stems from cross-site request forgery attacks, which may allow unauthorized changes to SMTP configuration...
GetSimple CMS cross-site scripting vulnerability
GetSimple CMS is an open-source content management system developed by GetSimple CMS. Version 1.1.2 of GetSimple CMS contains a cross-site scripting vulnerability. This vulnerability stems from insufficient cleaning and escaping of characters, which may lead to storage-based cross-site scripting...
GetSimple Content Management System Cross-Site Request Forgery Vulnerability
GetSimple Content Management System is an open-source content management system developed by GetSimpleCMS. The GetSimple Content Management System has a cross-site request forgeing vulnerability, which stems from the existence of cross-site request forgery attacks. This vulnerability may allow...
GetSimple Content Management System: Code Injection Vulnerability
GetSimple Content Management System is an open-source content management system developed by GetSimpleCMS. Version 1.1.2 of GetSimple Content Management System has a code injection vulnerability. This vulnerability stems from PHP code injection through plugin configuration parameters, which may...
PT-2026-3796
GetSimple CMS My SMTP Contact Plugin 1.1.2 contains a PHP code injection vulnerability. An authenticated administrator can inject arbitrary PHP code through plugin configuration parameters, leading to remote code execution on the server...
PT-2026-3799
GetSimple CMS My SMTP Contact Plugin 1.1.1 contains a cross-site request forgery CSRF vulnerability. Attackers can craft a malicious webpage that, when visited by an authenticated administrator, can change SMTP configuration settings in the plugin. This may allow unauthorized changes but does not...
CVE-2019-11231
An issue was discovered in GetSimple CMS through 3.3.15. insufficient input sanitation in the theme-edit.php file allows upload of files with arbitrary content PHP code, for example. This vulnerability is triggered by an authenticated user; however, authentication can be bypassed. According to th...
CVE-2020-24861
GetSimple CMS 3.3.16 allows in parameter 'permalink' on the Settings page persistent Cross Site Scripting which is executed when you create and open a new page...
CVE-2019-16333
GetSimple CMS v3.3.15 has Persistent Cross-Site Scripting XSS in admin/theme-edit.php...
📄 GetSimple CMS 3.3.16 Cross Site Request Forgery
GetSimple CMS version 3.3.16 cross site request forgery proof of concept that deletes all backups without user confirmation. ============================================================================================================================================= | Title : GetSimple CMS 3.3.16...
EUVD-2013-1458
Malware in sbrugna...
EUVD-2010-5016
Malware in sbrugna...
EUVD-2020-16575
Malware in sbrugna...
EUVD-2018-7701
Malware in sbrugna...
EUVD-2018-11520
Malware in sbrugna...
EUVD-2014-8620
Malware in sbrugna...
EUVD-2020-17569
Malware in sbrugna...
EUVD-2015-5312
Malware in sbrugna...