Vendorsget-simplegetsimple_cms3.3.1
Vulnerabilities

get-simple GetSimple CMS 3.3.1

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

3CVEs
CVE-2017-10673
admin/profile.php in GetSimple CMS 3.x has XSS in a name field.
Published 2017-06-29 · Modified
6.1EPSS 0.007
CVE-2014-8790
XML external entity (XXE) vulnerability in admin/api.php in GetSimple CMS 3.1.1 through 3.3.x before 3.3.5 Beta 1, when in certain configurations, allows remote attackers to read arbitrary files via the data parameter.
Published 2015-01-20 · Modified
5.0EPSS 0.025
CVE-2014-1603
Multiple cross-site scripting (XSS) vulnerabilities in GetSimple CMS 3.3.1 allow remote attackers to inject arbitrary web script or HTML via the (1) param parameter to admin/load.php or (2) user, (3) email, or (4) name parameter in a Save Settings action to admin/settings.php.
Published 2014-05-14 · Modified
4.31 PoCEPSS 0.032