Getsimple Cms Security Vulnerabilities and Issues — Getsimple Cms CVE List

Lucene search

Get-simpleGetsimple Cms

3 matches found

CVE•added 2015/01/20 3:59 p.m.•38 views

CVE-2014-8790

XML external entity (XXE) vulnerability in admin/api.php in GetSimple CMS 3.1.1 through 3.3.x before 3.3.5 Beta 1, when in certain configurations, allows remote attackers to read arbitrary files via the data parameter.

5CVSS6.9AI score0.00657EPSS

CVE•added 2015/07/01 4:59 p.m.•37 views

CVE-2015-5355

Multiple cross-site scripting (XSS) vulnerabilities in GetSimple CMS before 3.3.6 allow remote attackers to inject arbitrary web script or HTML via the (1) post-content or (2) post-title parameter to admin/edit.php.

4.3CVSS5.9AI score0.00296EPSS

CVE•added 2015/07/01 4:59 p.m.•36 views

CVE-2015-5356

Cross-site scripting (XSS) vulnerability in admin/filebrowser.php in GetSimple CMS before 3.3.6 allows remote attackers to inject arbitrary web script or HTML via the func parameter.

4.3CVSS5.9AI score0.00296EPSS