GetSimpleCMS-CE
- Total products in the ecosystem
- 1
- Total vulnerabilities (90 days)
- 1
en
Verify to analyze this security profile
As of 09/20/2026, GetSimpleCMS-CE recorded 1 security vulnerabilities in the last 90 days across 1 products, including 1 rated High or above and 0 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, GetSimpleCMS-CE had the most security vulnerabilities in the GetSimpleCMS-CE ecosystem, with 1 vulnerabilities—approximately 100% of the provider's total vulnerabilities during this period.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
Explore CyStack VulnScan| Vulnerability | Exploitation status | Fix | Affected product | Published | Severity |
|---|---|---|---|---|---|
CVE-2026-53952GetSimple CMS & GetSimpleCMS-CE have an Unauthenticated Admin Account Creation via Setup Logic Flaw | Exploitation statusNot known exploited | FixNot confirmed | Affected productGetSimpleCMS-CE | Published09/11/2026 | SeverityCritical |
CVE-2026-28495GetSimple CMS has CSRF to Remote Code Execution via Arbitrary PHP Write in gsconfig.php | Exploitation statusNot known exploited | FixNot confirmed | Affected productGetSimpleCMS-CE | Published03/10/2026 | SeverityCritical |
CVE-2026-26351GetSimpleCMS-CE < 3.3.22 Stored XSS via components.php | Exploitation statusNot known exploited | FixYes | Affected productGetSimpleCMS-CE | Published02/24/2026 | SeverityMedium |
CVE-2026-27202GetSimple CMS: Uploaded Files (feature) Arbitrary File Read Vulnerability | Exploitation statusPublic exploit | FixNot confirmed | Affected productGetSimpleCMS-CE | Published02/20/2026 | SeverityHigh |
CVE-2026-27161Unauthenticated Information Disclosure via .htaccess Reliance in Sensitive Directories | Exploitation statusPublic exploit | FixNot confirmed | Affected productGetSimpleCMS-CE | Published02/20/2026 | SeverityHigh |
CVE-2026-27147GetSimple CMS: Stored Cross-Site Scripting (XSS) via SVG File Upload (Authenticated) | Exploitation statusPublic exploit | FixNot confirmed | Affected productGetSimpleCMS-CE | Published02/20/2026 | SeverityMedium |
CVE-2026-27146GetSimple CMS: Cross-Site Request Forgery (CSRF) in File Upload Allows Arbitrary Uploads | Exploitation statusPublic exploit | FixNot confirmed | Affected productGetSimpleCMS-CE | Published02/20/2026 | SeverityHigh |
CVE-2025-48492GetSimple CMS RCE in Edit component | Exploitation statusPublic exploit | FixYes | Affected productGetSimpleCMS-CE | Published05/30/2025 | SeverityHigh |