CVE-2014-8790

MEDIUM 5.0CVE-2014-8790 · Published 20/01/2015 · updated 17/06/2026

In short

CVE-2014-8790 is a MEDIUM (CVSS 5.0) vulnerability affecting getsimple cms (cagintranetworks), getsimple cms (get-simple).
Chance of exploitation in the next 30 days (EPSS): 2.5%, higher than 85.0% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
getsimple cms cagintranetworks	`= 3.3.3= 3.3.4`	No fix yet
getsimple cms get-simple	`= 3.1.1= 3.1.2= 3.2= 3.2.1= 3.2.2= 3.2.3= 3.3.0= 3.3.1= 3.3.2`	No fix yet

Description

XML external entity (XXE) vulnerability in admin/api.php in GetSimple CMS 3.1.1 through 3.3.x before 3.3.5 Beta 1, when in certain configurations, allows remote attackers to read arbitrary files via the data parameter.

References

More vulnerabilities in getsimple cms

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free