agentprime: getsimplecms-ceEvery new CVE for getsimplecms-ce.https://agentprime.io/CVE-2026-71542: GetSimple CMS: Stored Cross-Site Scripting (XSS) via the "title" parameter in admin/components.phphttps://agentprime.io/advisories/CVE-2026-71542/https://agentprime.io/advisories/CVE-2026-71542/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 01 Oct 2026 19:40:04 GMTCVECVE-2026-71426: GetSimple CMS: Authenticated Stored Local File Inclusion (LFI) via page "template" fieldhttps://agentprime.io/advisories/CVE-2026-71426/https://agentprime.io/advisories/CVE-2026-71426/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 01 Oct 2026 19:39:29 GMTCVECVE-2026-70650: GetSimple CMS: Authenticated Stored XSS in backup viewer (backup-edit.php) via output decoding of page meta fields and contenthttps://agentprime.io/advisories/CVE-2026-70650/https://agentprime.io/advisories/CVE-2026-70650/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 01 Oct 2026 19:39:00 GMTCVECVE-2026-56662: GetSimple CMS: Missing CSRF protection in UpdateCE allows forging a privileged server-side update requesthttps://agentprime.io/advisories/CVE-2026-56662/https://agentprime.io/advisories/CVE-2026-56662/CVSS 9.6 (Critical). Critical: CVSS score 9.6: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 01 Oct 2026 19:38:30 GMTCVEcriticalCVE-2026-56661: GetSimple CMS: Server-Side Request Forgery in the UpdateCE update endpointhttps://agentprime.io/advisories/CVE-2026-56661/https://agentprime.io/advisories/CVE-2026-56661/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 01 Oct 2026 19:38:08 GMTCVECVE-2026-56660: GetSimple CMS: CSRF, SSRF, and Unrestricted Zip Extractionhttps://agentprime.io/advisories/CVE-2026-56660/https://agentprime.io/advisories/CVE-2026-56660/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 01 Oct 2026 19:37:46 GMTCVEcriticalCVE-2026-53953: GetSimple CMS: Predictable Password Reset Password Allows Administrator Account Takeoverhttps://agentprime.io/advisories/CVE-2026-53953/https://agentprime.io/advisories/CVE-2026-53953/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 01 Oct 2026 19:36:17 GMTCVEcriticalCVE-2026-53952: GetSimple CMS & GetSimpleCMS-CE have an Unauthenticated Admin Account Creation via Setup Logic Flawhttps://agentprime.io/advisories/CVE-2026-53952/https://agentprime.io/advisories/CVE-2026-53952/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 11 Sep 2026 19:23:30 GMTCVEcriticalCVE-2026-28495: GetSimple CMS has CSRF to Remote Code Execution via Arbitrary PHP Write in gsconfig.phphttps://agentprime.io/advisories/CVE-2026-28495/https://agentprime.io/advisories/CVE-2026-28495/CVSS 9.7 (Critical). Critical: CVSS score 9.7: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 10 Mar 2026 19:25:00 GMTCVEcriticalCVE-2026-26351: GetSimpleCMS-CE < 3.3.22 Stored XSS via components.phphttps://agentprime.io/advisories/CVE-2026-26351/https://agentprime.io/advisories/CVE-2026-26351/CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 24 Feb 2026 22:05:54 GMTCVECVE-2026-27202: GetSimple CMS: Uploaded Files (feature) Arbitrary File Read Vulnerabilityhttps://agentprime.io/advisories/CVE-2026-27202/https://agentprime.io/advisories/CVE-2026-27202/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 20 Feb 2026 23:26:23 GMTCVECVE-2026-27161: Unauthenticated Information Disclosure via .htaccess Reliance in Sensitive Directorieshttps://agentprime.io/advisories/CVE-2026-27161/https://agentprime.io/advisories/CVE-2026-27161/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 20 Feb 2026 23:19:08 GMTCVECVE-2026-27147: GetSimple CMS: Stored Cross-Site Scripting (XSS) via SVG File Upload (Authenticated)https://agentprime.io/advisories/CVE-2026-27147/https://agentprime.io/advisories/CVE-2026-27147/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 20 Feb 2026 23:14:00 GMTCVECVE-2026-27146: GetSimple CMS: Cross-Site Request Forgery (CSRF) in File Upload Allows Arbitrary Uploadshttps://agentprime.io/advisories/CVE-2026-27146/https://agentprime.io/advisories/CVE-2026-27146/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 20 Feb 2026 23:10:09 GMTCVECVE-2025-48492: GetSimple CMS RCE in Edit componenthttps://agentprime.io/advisories/CVE-2025-48492/https://agentprime.io/advisories/CVE-2025-48492/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 30 May 2025 06:13:55 GMTCVE