Getsimple Cms@3.3.0 Security Vulnerabilities and Issues — Getsimple Cms@3.3.0 CVE List

Lucene search

Get-simpleGetsimple Cms3.3.0

2 matches found

CVE•added 2015/01/20 3:59 p.m.•38 views

CVE-2014-8790

XML external entity (XXE) vulnerability in admin/api.php in GetSimple CMS 3.1.1 through 3.3.x before 3.3.5 Beta 1, when in certain configurations, allows remote attackers to read arbitrary files via the data parameter.

5CVSS6.9AI score0.00657EPSS

CVE•added 2017/06/29 8:29 a.m.•34 views

CVE-2017-10673

admin/profile.php in GetSimple CMS 3.x has XSS in a name field.

6.1CVSS5.9AI score0.0024EPSS