PT-2022-25928 · Unknown · Getsimple Cms

Picklerbox · Published 2022-10-18 · Updated 2025-05-13 · CVE-2022-41544

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions GetSimple CMS version 3.3.16

Description The issue is a remote code execution (RCE) vulnerability. It can be exploited via the edited file parameter in the admin/theme-edit.php file.

Recommendations For GetSimple CMS version 3.3.16, update to a version that contains a fix for this issue. As a temporary workaround, consider restricting access to the admin/theme-edit.php file to minimize the risk of exploitation. Avoid using the edited file parameter in the affected file until the issue is resolved.

Exploit

Fix

RCE

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2022-41544

Affected Products

Getsimple Cms

References · 8

• 🔥 https://github.com/GetSimpleCMS/GetSimpleCMS/issues/1352 · Exploit
• 🔥 https://exploit-db.com/exploits/51475 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-41544 · Security Note
• https://osv.dev/vulnerability/CVE-2022-41544 · Vendor Advisory
• https://t.me/cibsecurity/51673 · Telegram Post
• https://t.me/cvenotify/51067 · Telegram Post
• https://t.me/cvenotify/122057 · Telegram Post
• http://packetstormsecurity.com/files/172553/GetSimple-CMS-3.3.16-Shell-Upload.html · Note