Zeynalxan

**Name of the Vulnerable Software and Affected Versions** GetSimpleCMS version 3.3.16 **Description** A vulnerability was found in the processing of the file /admin/profile.php, which leads to cross-site request forgery. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. **Recommendations** For GetSimpleCMS version 3.3.16, as a temporary workaround, consider disabling access to the /admin/profile.php file until a patch is available. Restrict access to this file to minimize the risk of exploitation.