G
Vendor security profile
GetSimpleCMS-CE
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs8
Critical4
CISA KEV0
Public exploit6
Patch rate%0
Avg. CVSS8.7
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
0
1
7
CVE KEV
CVE severity distribution
8toplam CVE
Critical4 (50%)
High4 (50%)
Patch and exploitation view
%0
Verified patch
%0
CISA KEV
%75
Public exploit
0Patch available
0Partial
0Workaround
0Vendor: no patch
8Unknown
Latest vulnerabilities
8.7
CVE-2026-71542
GetSimple CMS: Stored Cross-Site Scripting (XSS) via the "title" parameter in admin/components.php
G
Patch status unknownEPSS %0
7.1
CVE-2026-71426
GetSimple CMS: Authenticated Stored Local File Inclusion (LFI) via page "template" field
G
Patch status unknownEPSS %0
8.8
CVE-2026-70650
GetSimple CMS: Authenticated Stored XSS in backup viewer (backup-edit.php) via output decoding of page meta fields and content
G
Patch status unknownEPSS %0
9.6
CVE-2026-56662
GetSimple CMS: Missing CSRF protection in UpdateCE allows forging a privileged server-side update request
G
Patch status unknownEPSS %0
7.5
CVE-2026-56661
GetSimple CMS: Server-Side Request Forgery in the UpdateCE update endpoint
G
Patch status unknownEPSS %0
9.1
CVE-2026-56660
GetSimple CMS: CSRF, SSRF, and Unrestricted Zip Extraction
G
Patch status unknownEPSS %1
9.1
CVE-2026-53953
GetSimple CMS: Predictable Password Reset Password Allows Administrator Account Takeover
G
Patch status unknownEPSS %0
9.8
CVE-2026-53952
GetSimple CMS & GetSimpleCMS-CE have an Unauthenticated Admin Account Creation via Setup Logic Flaw
G
Patch status unknownEPSS %1