CVE-2024-55085

Severity: critical (CVSS 9.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-12-16 · updated 2026-06-17
Weakness: CWE-94

Description

GetSimple CMS CE 3.3.19 suffers from arbitrary code execution in the template editing function in the background management system, which can be used by an attacker to implement RCE.

Affected products

GetSimpleCMS-CE: 3.3.19

References

https://getsimple-ce.ovh/
https://tasteful-stamp-da4.notion.site/CVE-2024-55085-15b1e0f227cb80a5aee6faeb820bf7e6

Get alerted when CVE-2024-55085 or the next vulnerability affects your stack