CVE-2026-27202 — GetSimple CMS: Uploaded Files (feature) Arbitrary File Read Vulnerability

CVE-2026-27202

GetSimple CMS: Uploaded Files (feature) Arbitrary File Read Vulnerability PUBLISHED

Description (CNA)

GetSimple CMS is a content management system. All versions of GetSimple CMS have a flaw in the Uploaded Files feature that allows for arbitrary file reads. This issue has not been fixed at the time of publication.

Affected (CNA)

Vendor / product	Versions
GetSimpleCMS-CE / GetSimpleCMS-CE	affected <= 3.3.22

CWE

CWE-23, CWE-22

References

https://github.com/GetSimpleCMS-CE/GetSimpleCMS-CE/security/advisories/GHSA-xhwv-g6q4-h886

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.