CVE ID :CVE-2026-56660 Published : Oct. 1, 2026, 8:17 p.m. | 1 hour, 2 minutes ago Description :GetSimple CMS is a content management system (CMS), and GetSimple CMS CE is the community edition of that CMS. Prior to version 1.5, the update handler in UpdateCE.php downloads a ZIP archive and...

#Sicherheitslücke #Update

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-56660 - GetSimple CMS: CSRF, SSRF, and Unrestricted Zip Extraction

VERWANDTEARTIKEL

Autonomous AI agents tried to hack US, Canadian government websites

CVE-2026-70650 - GetSimple CMS: Authenticated Stored XSS in backup viewer (backup-edit.php) via output decoding of page meta fields and content

CVE-2026-71542 - GetSimple CMS: Stored Cross-Site Scripting (XSS) via the "title" parameter in admin/components.php

CVE-2026-56662 - GetSimple CMS: Missing CSRF protection in UpdateCE allows forging a privileged server-side update request

CVE-2026-53953 - GetSimple CMS: Predictable Password Reset Password Allows Administrator Account Takeover

CVE-2026-54049 - Sakai Conversations has a Stored XSS Issue