CVE-2024-55085

9.8 criticalEPSS 0.9%

Critical (9.8) in getsimple-ce getsimple cms. EPSS 0.9% chance of exploitation in the next 30 days.

GetSimple CMS CE 3.3.19 suffers from arbitrary code execution in the template editing function in the background management system, which can be used by an attacker to implement RCE.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.9% chance of exploitation in the next 30 days; higher than 58% of CVEs (scores of 2026-10-31)
CWE: CWE-94
Published: 2024-12-16
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

getsimple-ce:getsimple_cms

References

https://getsimple-ce.ovh/
https://tasteful-stamp-da4.notion.site/CVE-2024-55085-15b1e0f227cb80a5aee6faeb820bf7e6

Check your stack JSON