GetSimple CMS 跨站请求伪造漏洞

GetSimple CMS is an open-source content management system developed by GetSimple CMS. Version 3.3.22 of GetSimple CMS contains a cross-site request forgeing vulnerability. This vulnerability stems from the lack of CSRF protection, which may allow remote, unverified attackers to execute remote cod...

CVE-2025-52665

A malicious actor with access to the management network could exploit a misconfiguration in UniFi’s door access application, UniFi Access, that exposed a management API without proper authentication. This vulnerability was introduced in Version 3.3.22 and was fixed in Version 4.0.21 and later. ...

CVE-2025-48492

GetSimple CMS is a content management system. In versions starting from 3.3.16 to 3.3.21, an authenticated user with access to the Edit component can inject arbitrary PHP into a component file and execute it via a crafted query string, resulting in Remote Code Execution RCE. This issue is set to ...