Security Advisory

CVE-2026-27147

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2026-02-20 23:14:00

Last updated 2026-02-25 21:27:05

Assigner GitHub_M

State PUBLISHED

Description

GetSimple CMS is a content management system. All versions of GetSimple CMS are vulnerable to XSS through SVG file uploads. Authenticated users can upload SVG files via the administrative upload functionality, but they are not properly sanitized or restricted, allowing an attacker to embed malicious JavaScript. When the uploaded SVG file is accessed, the script executes in the browser. This issue does not have a fix at the time of publication.

← Browse all CVEs View on cve.org ↗