CVE ID :CVE-2026-53953 Published : Oct. 1, 2026, 8:17 p.m. | 1 hour, 2 minutes ago Description :GetSimple CMS is a content management system (CMS), and GetSimple CMS CE is the community edition of that CMS. In version 3.3.22, the password reset endpoint can be accessed without authentication....

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-53953 - GetSimple CMS: Predictable Password Reset Password Allows Administrator Account Takeover

VERWANDTEARTIKEL

CVE-2026-70650 - GetSimple CMS: Authenticated Stored XSS in backup viewer (backup-edit.php) via output decoding of page meta fields and content

CVE-2026-71542 - GetSimple CMS: Stored Cross-Site Scripting (XSS) via the "title" parameter in admin/components.php

CVE-2026-56660 - GetSimple CMS: CSRF, SSRF, and Unrestricted Zip Extraction

CVE-2026-56662 - GetSimple CMS: Missing CSRF protection in UpdateCE allows forging a privileged server-side update request

CVE-2026-54049 - Sakai Conversations has a Stored XSS Issue

CVE-2026-104286 - Fortinet FortiMail Path Traversal Vulnerability