CVE-2023-6188

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2023-6188
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-6188.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2023-6188
Published
2023-11-17T17:31:04.595Z
Modified
2026-07-15T01:49:18.947673461Z
Severity
  • 4.7 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L CVSS Calculator
Summary
GetSimpleCMS theme-edit.php code injection
Details

A vulnerability was found in GetSimpleCMS 3.3.16/3.4.0a. It has been rated as critical. This issue affects some unknown processing of the file /admin/theme-edit.php. The manipulation leads to code injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-245735.

Database specific 
{
    "cwe_ids": [
        "CWE-94"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/6xxx/CVE-2023-6188.json",
    "cna_assigner": "VulDB",
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "introduced": "3.4.0a"
                },
                {
                    "last_affected": "3.4.0a"
                }
            ],
            "source": "AFFECTED_FIELD"
        }
    ]
}
References

Affected packages

Git / github.com/getsimplecms/getsimplecms

Affected ranges

Type
GIT
Repo
https://github.com/getsimplecms/getsimplecms
Events
Introduced
e58b89e1efbd7e9cd3c9782c42d7f83ff0e74aad
Last affected
e58b89e1efbd7e9cd3c9782c42d7f83ff0e74aad
Database specific 
{
    "cpe": "cpe:2.3:a:get-simple:getsimplecms:3.3.16:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "3.3.16"
        },
        {
            "last_affected": "3.3.16"
        }
    ],
    "source": [
        "AFFECTED_FIELD",
        "CPE_STRING"
    ]
}

Affected versions

3.*
3.3.16
v3.*
v3.3.16

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-6188.json"