Lucene search

Getsimplecms Security Vulnerabilities - 2023

cve

CVE-2023-46040

Cross Site Scripting vulnerability in GetSimpleCMS v.3.4.0a allows a remote attacker to execute arbitrary code via the a crafted payload to the components.php function.

5.4CVSS

5.8AI Score

0.001EPSS

2023-10-31 02:15 AM

cve

CVE-2023-46042

An issue in GetSimpleCMS v.3.4.0a allows a remote attacker to execute arbitrary code via a crafted payload to the phpinfo().

9.8CVSS

9.4AI Score

0.007EPSS

2023-10-19 03:15 PM

cve

CVE-2023-6188

A vulnerability was found in GetSimpleCMS 3.3.16/3.4.0a. It has been rated as critical. This issue affects some unknown processing of the file /admin/theme-edit.php. The manipulation leads to code injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may ...

9.8CVSS

9.7AI Score

0.002EPSS

2023-11-17 06:15 PM