CVE-2021-47778 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

GetSimple CMS My SMTP Contact Plugin 1.1.2 contains a PHP code injection vulnerability. An authenticated administrator can inject arbitrary PHP code through plu…
High CVSS: 8.6

CVE-2021-47778

GetSimple CMS My SMTP Contact Plugin 1.1.2 contains a PHP code injection vulnerability. An authenticated administrator can inject arbitrary PHP code through plugin configuration parameters, leading to remote code execution on the server.
Vendor
Get-simple
Product
Getsimplecms
CWE
CWE-94
Yayın Tarihi
2026-01-21 18:16:09
Güncelleme
2026-03-06 20:15:55
Source Identifier
disclosure@vulncheck.com
KEV Date Added
-

Kategoriler

CWE-94 Getsimplecms HIGH Get-simple 2026

Referanslar

http://get-simple.info https://github.com/GetSimpleCMS/GetSimpleCMS https://github.com/boku7/gsSMTP-Csrf2Xss2RCE/ https://www.exploit-db.com/exploits/49774 https://www.vulncheck.com/advisories/getsimple-cms-my-smtp-contact-plugin-php-code-injection